BORDER  PATROL 

Content  filters  can  prevent  sensitive  data  from 
leaking  outside  the  corporate  network,  page  32 


PATENT  PIONEER 
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Martin  Goetz  doesn’t  mind  software  patents  but 
says  there  needs  to  be  a  real  invention.  f  ^ 
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IT  Execs  Race 
To  Shore  Up 
Their  Systems 

Look  to  boost  resiliency  before  the  next 
hurricane  season;  staff  shortages  continue 


BY  PATRICK  THIBODEAU 
AND  HEATHER  HAVENSTEIN 

Along  the  storm- 
ravaged  Gulf  Coast, 
six  months  after  Hurri¬ 
cane  Katrina  struck,  there’s 
a  big  deadline  ahead  for  IT 
managers:  June  1,  the  start  of 
the  next  hurricane  season. 

As  Mardi  Gras  was  cel¬ 
ebrated  in  a  still-recovering 
New  Orleans  last  week, 
more  than  a  dozen  IT  man¬ 
agers  in  Louisiana  and  Mis¬ 
sissippi  said  they  are  rush¬ 
ing  to  build  more  resilient 


systems,  improve  their  com¬ 
panies’  communications 
capabilities  and  apply  the 
many  lessons  they  learned 
from  Katrina. 

There’s  a  particularly 
strong  push  to  increase  data 
backup  capabilities,  espe¬ 
cially  via  online  replication 
to  other  sites,  and  to  set  up 
wireless  and  satellite  com¬ 
munications  systems,  the 
IT  managers  said.  And  the 
work  is  being  done  with  a 
sense  of  urgency  because  of 
Katrina,  page  14 


There  is  not 
ever  going  to  j 
be  the  perfect  di¬ 
saster  recovery  plan. 
You  can’t  write  the  j 
perfect  script,  and 
the  next  time  will  be  different. 

JAN  RIDEOUT,  CIO,  NORTHROP  GRUMMAN  SHIP  SYSTEMS  | 


Katrina  gave  busine: 
executives  a  better 
appreciation  of  IT’s 
value,  tech  manager 
say. 

A  panel  discusses 
emergency  com¬ 
munications  issues 
that  have  yet  to  be 
resolved. 
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Slogans  aren’t 
enough!  Learn  how 
to  turn  your  it  shop  into 
a  real  innovation  machine. 


Page  43 
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Users  Buying  Into  Free 
‘Express’  Databases 


Top  vendors  look 
to  block  gains  by 
open-source  rivals 

BY  ERIC  LAI 

Missouri  State  University’s 
school  of  information  systems 
and  Web  start-up  Savvica  Inc. 
don’t  have  a  lot  in  common 
apart  from  tight  budgets.  In 
the  recent  past,  their  spending 
limitations  likely  would  have 


meant  choosing  open-source 
software  such  as  MySQL  or 
Postgres  as  a  database. 

But  last  month,  both  the 
university  and  the  e-learning 
firm  eschewed  open- 
source  technology, 
opting  instead  to 
install  commercial 
databases  —  albeit 
free,  stripped-down 
versions,  which  all  of 
the  top  database  ven¬ 


dors  are  now  offering. 

“Everything’s  so  much  more 
solid  now,”  said  John  Green, 
president  of  technology  at 
Toronto-based  Savvica.  Bur¬ 
geoning  Web  traffic  was  caus¬ 
ing  the  company’s  MySQL 
server  to  crash  continually. 
Also,  its  e-learning  applica¬ 
tions  are  written  in  Java,  which 
Green  felt  wasn’t 
well  supported  by  the 
open-source  database. 

Instead  of  adding 
more  MySQL  servers, 
Green  decided  to  roll 
out  three  installations 
Databases,  page  61 


Ingres  CTO  Dave 
Dargo  contends, 
that  the  momentum 
of  open-source 
databases  isn’t 
slowing,  PX0£23 


GATEWAY  IS  GOOD  FOR  YOUR  ORGANIZATION 

Government,  business,  education  and  everything  in  between. 


Gateway's  notebooks,  desktops,  monitors  and  servers  are  winning  over  state  and  local  government 
agencies  in  places  like  the  states  of  California,  New  York,  Texas,  Florida  and  Tennessee.  That's 
because  Gateway  understands  the  unique  challenges  faced  by  professional  sectors,  from  government 
to  education,  big  business  to  small  business.  We  can  put  our  technology  solutions  to  work  for  you 
by  customizing  our  innovative  products  and  services  to  meet  your  needs.  An  exclusive  online 
eProcurement  site,  priority  access  support  and  unmatched  account  management  are  just  some  of 
the  ways  Gateway  helps  organizations  like  yours  remain  productive.  And  with  Gateway's  outstanding 
quality,  savings  and  service,  it's  a  win-win  situation.  Simply  stated,  Gateway  is  good  for  government. 
Gateway  is  good  for  your  organization. 

TO  LEARN  MORE  CALL  1-866-570-0762  OR  VISIT  Gateway.com 
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"If  you  demand  the  ultimate  in  performance,  the  M465-E  belongs  on  your  short  list." 

LAPTOP  Magazine,  Winter  2006  Laptop  Mobile  Tech  Buyer's  Guide:  Best  New  Business  Notebooks 

To  learn  more  about  the  M465  and  our  other  award-winning  technology  solutions, 

CALL  YOUR  GATEWAY  ACCOUNT  REPRESENTATIVE  TODAY 
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With  Sybase®  software,  Nielsen  Media  Research  enables  customers 
to  get  real-time  access  to  audience  viewing  habits  through: 

[5?  800%  faster  data  loads 

a  secure,  Web-based  interface 
j  70%  data  compression  ratio 

When  viewing  trends  change  in  the  ultra-competitive  broadcast  industry,  Nielsen  Media  Research  and  their  customers  know  it  instantly.  Because 
they  have  an  information  edge  that  comes  from  using  Sybase  10  -  a  powerful  data  analytics  server  that  enables  their  clients  to  analyze  more  data 
in  more  ways.  Up  to  lOOx  faster.  And  Sybase  10  helps  Nielsen  provide  better  service  at  a  lower  cost.  It's  an  edge  that  only  we  can  deliver.  And  it’s 
why  more  global  companies  are  tuning-in  to  Sybase  every  day.  www.sybase.com/infoedge33 

Copyright  ©2006  Sybase,  Inc.  All  rights  reserved.  Sybase  and  the  Sybase  logo  are  trademarks  of  Sybase,  Inc.  ®  indicates  registration  in  the  United  States  of  America. 

All  product  and  company  names  are  trademarks  of  their  respective  owners. 
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Better  Grade  for  Smart  Switches 

In  the  Technology  section:  Intelligent  storage  switches  are  maturing, 
and  the  technology  is  being  accepted  by  an  increasing  number  of 
users.  But  it  may  be  a  year  or  two  away  from  making  a  difference 
at  the  heart  of  SANs  and  some  other  critical  applications.  Page  29 


The  Sweet  Smell  of  Success 

In  the  Management  section:  Skunk  works  can  help 
you  develop  an  innovative  project  with  less  risk  that 
the  plug  will  be  pulled  prematurely.  Here  are  some 
of  the  do’s  and  don’ts.  Page  50 


NEWS 


6  ST  executives  who  plan  to  attend 
Computer-world's  Premier  100 
IT  Leaders  Conference  this  week 
said  that  pushing  new  technolo¬ 
gies  on  end  users  is  no  longer  the 
favored  path  for  IT  innovation. 

8  Breach  notification  laws  are  forc¬ 
ing  companies  to  pay  attention 
to  IT  security,  but  there’s  little 
consensus  on  when  they  should 
disclose  data  breaches. 

8Q&A:  Orson  Swindle,  a  former 
member  of  the  FTC,  says  com¬ 
panies  could  face  a  loss  of  cus¬ 
tomer  confidence  in  their  technol¬ 
ogy  if  they  don’t  better  protect  the 
data  they  collect. 

4A  Global  Dispatches:  India-based 
10  Satyam  Computer  Services 
plans  to  expand  its  software 
development  operations  in  China 
in  order  to  cut  labor  costs. 

MThe  Sun  Grid  program  is  fur¬ 
ther  delayed  by  the  U.S.  State 
Department’s  security  concerns. 

All  The  theft  of  backup  com- 
U  puter  tapes  and  disks  from  an 
employee’s  parked  car  leads  to  the 
departure  of  four  workers  from  an 
Oregon  health  care  provider. 

AA  Q&A:  Ingres  CTO  Dave  Dargo 
faU  discusses  the  former  CA 
unit’s  attempts  to  compete  with 
the  Big  3  database  vendors  and 
outlines  the  company’s  open- 
source  product  road  map. 

04  At  VoiceCon,  Cisco  and  Avaya 
0 1  will  announce  plans  to  sup¬ 
port  the  Session  Initiation  Pro¬ 
tocol  and  related  standards  in 
their  unified  voice,  video  and  data 
communications  products. 


TECHNOLOGY 

AA  Border  Patrol.  An  increasing 
Ufa  number  of  companies  are  us¬ 
ing  network-based  content  moni¬ 
toring  tools  that  analyze  traffic 
for  sensitive  content  and  block  it 
from  moving  beyond  the  corpo¬ 
rate  LAN. 

A  A  Future  Watch:  Supercomput- 
uU  mg  Turns  Toward  Productivity. 

Clusters  of  commodity  processors 
have  come  to  dominate  supercom¬ 
puting,  but  some  users  are  begin¬ 
ning  to  push  back.  What  they 
need  is  faster  data  flow. 

AA  Security  Manager’s  Journal: 
UU  Job  Interview  Raises  Plenty  of 

Questions.  C.J.  Kelly  thinks  about 
changing  jobs  but  discovers  as 
she  interviews  with  a  prospective 
employer  that  the  applicant  is 
sometimes  better  prepared  for 
the  interview  than  the  people 
representing  the  company  she 
would  join. 

MANAGEMENT 

«  Jump-start  Innovation.  There’s 
a  renewed  emphasis  on  right- 
brained  approaches  to  succeed¬ 
ing  in  today’s  increasingly  global, 
hypercompetitive,  unforgiving 
business  world.  Here’s  what  some 
leading  IT  groups  are  doing  and 
how  you  can  light  up  your  own 
IT  shop. 

C  A  Bringing  Homegrown  IT  to 
Ufa  Market.  Procter  &  Gamble 
has  long  been  known  for  innova¬ 
tion,  but  lately  it’s  been  applying 
that  spirit  to  marketing  some  of 
its  own  in-house  IT  products  and 
services.  And  it’s  finding  that  the 
ROI  is  more  than  monetary. 


OPINIONS 


WOn  the  Mark:  Mark  Hall  hears 
from  a  CRM  vendor  who  says 
that  whether  you’re  deploying 
conventional  software  or  apps 
for  wireless  devices,  you  should 
choose  the  10  features  that  your 
users  need  most  and  stop  there. 

A  A  Don  Tennant  says  Corel,  which 
fa*t  was  instrumental  in  creating 
the  OASIS  OpenDocument  for¬ 
mat,  has  betrayed  users  by  surren¬ 
dering  to  Microsoft  and  distanc¬ 
ing  itself  from  the  standard. 

M Martin  Goetz  isn’t  opposed  to 
software  being  patented;  after 
all,  he  received  the  first  software 
patent  nearly  40  years  ago.  But  he 
asks  why  patents  should  be  grant¬ 
ed  when  no  invention  is  involved. 

A  A  Douglas  Schweitzer  compares 
^lUthe  most  common  broadband 
technologies  to  help  telecommut¬ 
ers  make  a  choice. 

MPaul  Glen  notes  that  most  dis¬ 
cussions  of  MBAs  center  on 
the  credential  and  the  cost  rather 
than  the  content.  He  looks  at  what 
the  coveted  degree  does  —  and 
doesn’t  —  provide. 

AAFrankly  Speaking:  Frank  Hayes 

Ufasays  users  will  welcome  big 
changes,  as  long  as  those  changes 
don’t  interfere  with  the  habits  that 
have  become  a  part  of  their  work 
processes. 
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Best  Practices  for  Mobile  Mania 

MOBILE/WIRELESS:  Sandra  Gittlen  explains 
how  to  lessen  the  impact  of  all  those  cell 
phones,  MP3  players  and  digital  cameras 
hooking  up  to  your  network. 

O  QuickLink  a8120 

QuickStudy:  VoIP 

NETWORKING:  Voice  over  IP  is  a  system  for 
delivering  digitized  voice  communications 
across  IP  networks.  VoIP  technology  allows 
phone  calls  to  be  made  between  compatible 
handsets  or  on  computers  with  appropriate 
software.  ©  QuickLink  a8100 

Protect  Your  Job  From  Offshoring 

CAREERS:  Survival  skills  include  developing 
teamwork  and  communication  techniques, 
becoming  familiar  with  other  cultures, 
and  choosing  industries  and  occupations 
strategically,  according  to  a  report  by  the 
Association  for  Computing  Machinery. 

©  QuickLink  a8130 

Putting  Your  Office  in  Your  Pocket 

NETWORKING:  Columnist  Bert  Latamore 
explains  how  two  hospitals  use  Wi-Fi  to 
give  doctors  and  nurses  greater  mobility. 

©  QuickLink  a8110 

Security  Updates 

BLOGS:  Get  your  daily  dose  of  commentary 
and  advice  from  security  experts  Doug 
Schweitzer,  Martin  McKeay  and  C.J.  Kelly. 

©  QuickLink  a7881 

Computerworld  TechCast 

AUDIO:  This  weekly  podcast  delivers  sum¬ 
maries  of  key  technologies  and  concepts. 
Listen  in  your  browser,  or  subscribe  to  the 
RSS  feed  and  download  new  installments  to 
your  MP3  player.  ©  QuickLink  a778Q 
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RIM  Pays  8612.5M 
To  Settle  NTP  Suit 

Research  In  Motion  Ltd.  late  last 
week  agreed  to  pay  $612.5  million 
to  NTP  Inc.  to  settle  the  long- 
running  legal  fight  between  the 
two  companies.  RIM  said  the 
settlement  includes  a  perpetual, 
fully  paid  license  for  all  NTP  pat¬ 
ents.  The  two  companies  have 
finalized  the  deal  and  ended  all 
litigation.  The  dispute  with  NTP, 
a  patent-holding  company,  had 
threatened  to  halt  RIM’s  Black- 
Berry  e-mail  service. 

RIM  last  week  also  warned 
that  operating  results  for  its 
fourth  quarter,  which  ended  Sat¬ 
urday,  will  fall  below  earlier  ex¬ 
pectations,  primarily  because  of 
the  uncertainty  surrounding  the 
NTP  litigation.  RIM  estimated 
that  it  got  between  70,000  and 
130,000  fewer  new  subscribers 
than  expected  during  the  quarter. 
The  company  expects  to  report 
revenue  of  $550  million  to 
$560  million  in  the  quarter 
versus  earlier  estimates  of 
$590  million  to  $620  million. 


Intel  Issues  Q1 
Revenue  Warning 

Intel  Corp.  has  warned  that 
its  first-quarter  revenue  will 
be  lower  than  expected.  The 
company  said  sales  for  the  three 
months  ending  March  31  will  be 
between  $8.7  billion  and  $9.1 
million,  compared  with  an  earlier 
estimate  of  $9.1  million  to  $9.7 
million.  Intel  blamed  the  shortfall 
on  weak  demand  and  a  loss  of 
market  share.  Analysts  blamed 
competition  from  Advanced  Mi¬ 
cro  Devices  Inc.  for  the  loss. 

ACS  Wins  $200M 
IT  Outsourcing  Pact 

Affiliated  Computer  Services  Inc. 
has  been  awarded  a  five-year, 
$200  miliion  IT  outsourcing  con¬ 
tract  from  MeadWestvaco  Corp., 
a  supplier  of  packaging  products 
in  Stamford,  Conn.  The  contract 
calls  for  ACS  to  centralize  and 
consolidate  MeadWestvaco’s  IT 
infrastructure.  ACS  will  also  pro¬ 
vide  data  network  management, 
help  desk,  security  administration 
and  disaster  recovery  services. 
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Technology  Loses  Its  Drive 
In  IT  Innovation  Processes 


IT  execs  shift  focus  to  collaborating 
with  users,  meeting  business  needs 


BY  TODD  R.  WEISS 

Listening  to  end  us¬ 
ers  describe  how  they 
do  their  jobs  and  then 
watching  them  at  work 
has  led  to  some  eye-opening 
moments  for  Franz  Fruehwald, 
CIO  for  the  Catholic  Human 
Services  unit  within  the  Arch¬ 
diocese  of  Philadelphia. 

Instead  of  just  making  un¬ 
targeted,  wholesale  changes 
to  systems,  Fruehwald  and 
his  staff  have  learned  lessons 
from  archdiocese  employees 
and  worked  with  them  to  de¬ 
termine  how  to  best  meet  their 
business  needs. 

“In  the  past,  innovation 
has  been  heavily  technology- 
driven,  with  IT  being  the 
primary  driver,”  Fruehwald 
said  last  week.  But  that  ap¬ 
proach  “had  mixed  results, 
with  some  users  feeling  that 
IT  has  forced  certain  projects 
and  technologies  on  them,”  he 
added.  “Today,  we  are  more 
collaborative.” 

That  mind-set  was  largely 
echoed  by  several  other  IT 
managers  who,  like  Frueh¬ 


wald,  plan  to  attend  Com- 
puterworld's  seventh  annual 
Premier  100  IT  Leaders  Con¬ 
ference,  which  starts  today  in 
Palm  Desert,  Calif. 

Beyond  Flashy  Hardware 

In  a  survey  of  Premier  100 
honorees  and  other  prospec¬ 
tive  attendees  that  was  con¬ 
ducted  via  the  Internet  in 
advance  of  the  conference,  51% 
of  the  162  respondents  said 
that  they  think  their  IT  de¬ 
partments  are  more  innovative 
than  their  companies  are  as  a 
whole  (see  chart). 

But  in  interviews  last  week, 
six  IT  managers  said  technol¬ 
ogy  innovation  nowadays  in¬ 
volves  much  more  than  spring¬ 
ing  flashy  new  hardware  and 
feature-filled  software  on  end 
users. 

To  foster  innovative  think¬ 
ing  inside  the  Philadelphia 
Archdiocese’s  IT  department, 
Fruehwald  encourages  all  of 
his  staffers  to  bring  forth  ideas, 
suggestions  and  recommenda¬ 
tions,  which  are  then  consid¬ 
ered  and  hashed  out.  “Often- 


New  Thinking 


Which  of  the  following 
methods  are  you  using  to 
foster  innovation  within  IT? 

57%:  Offer  IT  staffers  training 
programs  on  new  and  emerging 
technologies. 

46%:  Set  up  a  dedicated  group 
within  IT  to  work  on  pilot  projects 
and  emerging  technologies. 

41%:  Locate  IT  staffers  within 
business  departments  to  work  di- 
rectly  with  end  users  on  projects. 

35%:  Outsource  routine  tasks 
so  internal  IT  workers  can  focus  on 
new  projects  and  technologies. 

7%:  Have  not  implemented  any 
specific  methods  to  help  foster 
innovation. 


Is  your  IT  group 
more  or  less  innovative  than 
your  company  as  a  whole? 


2%:  11%:  Less 

Don’t  know  innovative 

BASE:  162  IT  and  business  managers  who 
are  Premier  100  honorees  or  have  regis¬ 
tered  to  attend  this  week's  Premier  100 
IT  Leaders  Conference.  The  respondents 
were  surveyed  by  Computerworld  via  the 
Internet  last  month.  Multiple  responses 
were  allowed  on  the  first  guestion. 


times,  we  ignore  the  folks  in 
the  trenches  who  we  rely  on 
for  the  day-to-day  operations, 
[but]  their  ideas  and  sugges¬ 
tions  are  as  valuable  as  those 
of  management,”  he  said. 

Fruehwald  noted,  though, 
that  the  process  isn’t  limited 
to  IT  itself.  By  witnessing  how 
end  users  worked,  IT  staffers 
learned  that  some  were  enter¬ 
ing  data  into  spreadsheets  they 
kept  for  themselves,  while  oth¬ 
ers  were  writing  information 
on  paper  and  then  filing  the 
papers  into  three-ring  binders. 
None  of  the  data  was  avail¬ 
able  on  an  organizationwide 
basis,  nor  was  it  easily  usable 
or  searchable  by  other  people 
who  needed  it,  Fruehwald  said. 

The  observations  led  to  the 
deployment  of  client  manage¬ 
ment  software  from  Harmony 
Information  Systems  Inc.  in 
Reston,  Va.,  via  a  phased  roll¬ 
out  that  was  completed  last 
year.  Fruehwald  said  the  Har¬ 
mony  software  stores  data  in 
a  single  repository  that  all  the 
end  users  can  access  —  some¬ 
thing  they  could  barely  imag¬ 
ine  doing  before. 

Todd  Norrgard,  director  of 
IT  at  Watertown,  N.Y.-based 
Car-Freshner  Corp.,  agreed 
that  IT  innovation  is  only  im¬ 
portant  if  it  increases  business 
efficiency. 

“We’ve  been  told  not  to  sell 
IT  —  just  recommend  solu¬ 
tions  for  known  problems,”  he 
said.  “There’s  got  to  be  a  tan¬ 
gible  payback,  or  innovation 
isn’t  a  sufficient  business  case 
for  implementing  something 
new.” 

The  air-freshener  maker’s 
approach  comes  from  lessons 
learned  over  the  years,  accord¬ 
ing  to  Norrgard. 

“In  the  past,  IT  has  attempted 
to  drive  innovation  by  provid¬ 
ing  new  technology  to  users, 
even  when  there  hasn’t  been 
an  identified  problem,”  he 
said.  “However,  the  result 
has  been  that  our  users  tend 
to  lose  focus  on  what  they’ve 
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been  hired  to  do.  They  do  IT, 
instead  of  using  IT  to  augment 
their  daily  business  tasks.” 

IT  leaders  need  more  politi¬ 
cal  skills  now  and  have  to  “be 
willing  to  take  a  humble  ap¬ 
proach  if  that’s  what  it  takes  to 
get  the  end  result,”  Norrgard 
added.  “IT  cannot  dictate,  and 
sometimes  cannot  be  the  face 
out  front  [on  projects].” 

Technology  is  still  a  big  part 
of  the  innovation  equation  at 
Talley  Defense  Systems  Inc.,  a 
maker  of  weapon  systems  and 
other  products  in  Mesa,  Ariz. 

Jim  Speer,  Talley’s  director 
of  information  systems,  said 
that  about  half  of  the  IT  in¬ 
novation  at  Talley  is  driven 
by  user  needs,  while  the  other 
half  is  driven  by  technology 
“without  inputs  or  recognition 
from  the  user  community.” 

Speer  added  that  Talley’s 
IT  department  definitely 
leads  other  operations  in  the 
push  for  innovation  inside  the 
company.  “We  usually  find 
ourselves  ahead  of  the  curve,” 
he  said.  “We  provide  solutions 
to  our  company  that  [other  de¬ 
partments]  are  not  even  aware 
of.”  Even  so,  Speer  said,  the 
guiding  principle  at  Talley  is 
that  technology  innovation  “is 
there  to  help  achieve  results  in 
the  organization.”  * 

MORE  ON  IT  INNOVATION 

Read  in-depth  stories  about  how  to 
encourage  innovation  within  your  IT  group, 
the  use  of  IT  skunk  works  and  Procter 
&  Gamble’s  effort  to  market  some  of  its 
internally  developed  technologies  to  other 
companies.  Page  43 

Frank  Hayes  says  the  secret  to  successful 
innovation  is  to  make  big  changes,  not 
small  ones.  You  should  think  about  that 
every  time  you  dial  a  phone.  Page  62 
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Debate  Continues  on 
Breach  Notification 


Privacy  experts,  lawyers  differ  on 
whether  more  laws  would  help 


BY  JAIKUMAR  VIJAYAN 

WHILE  SECURITY 
breach  notifica¬ 
tion  laws  are 
forcing  business¬ 
es  to  take  more  responsibility 
for  their  data,  the  debate  con¬ 
tinues  over  when  consumers 
should  be  notified  of  an  incident. 

On  one  side  are  those  call¬ 
ing  for  consumers  to  be  noti¬ 
fied  of  any  breach  that  could 
expose  sensitive  data.  Others, 
however,  say  a  high  disclosure 
threshold  should  be  required 
to  prevent  overnotification 
and  needless  costs. 

Franklin,  N.J.-based  Medco 
Health  Solutions  Inc.  has 
come  under  fire  for  waiting 
more  than  a  month  to  report 
the  theft  of  a  laptop  computer 
containing  unencrypted  Social 
Security  numbers  and  birth 
dates  of  about  4,300  Ohio  state 
workers  and  300  dependents. 
The  company,  which  han¬ 


dles  prescription  drug  benefits 
for  state  employees  in  Ohio, 
reported  the  Dec.  28  theft  to 
state  officials  on  Feb.  8.  The 
incident  prompted  Ohio  of¬ 
ficials  to  call  for  a  review  of 
the  $4  million  contract. 

Kirk  Herath,  chief  privacy 
officer  and  associate  general 
counsel  at  Nationwide  Mutual 
Insurance  Co.  in  Columbus, 
Ohio,  said  that  companies 
“clearly  have  a  responsibility  to 
safeguard  customer  informa¬ 
tion.”  However,  he  said  many 
state  laws  have  “hair  triggers” 
when  it  comes  to  disclosures. 

“I  really  think  the  standard 
for  disclosure  should  be  a  clear 
risk  of  danger  or  harm  to  the 
consumer,”  Herath  said. 

Others  argue  that  allowing 
companies  to  make  disclo¬ 
sures  based  on  their  assess¬ 
ment  of  the  risk  posed  to  con¬ 
sumers  is  unworkable. 

“Breaches  should  not  be  tied 


to  the  potential  criminal  use  of 
the  information,”  said  Christo¬ 
pher  Pierson,  a  lawyer  at  Lewis 
and  Rocca  LLP  in  Phoenix.  “I 
find  it  highly  unlikely  that  IT 
professionals,  company  officials 
or  lawyers  would  be  able  to 
examine  the  intent  of  a  criminal 
that  has  yet  to  be  identified.” 

There  is  a  growing  call  for 
a  national  breach-disclosure 
law  that  will  preempt  the 
patchwork  of  more  than  40 
state  laws  that  are  in  place  or 
in  the  works.  Many  state  laws 
specify  different  triggers  for 
notification  and  set  varying 
requirements  on  what  must  be 
disclosed  to  whom  and  when. 

California,  for  instance, 
requires  companies  to  notify 
consumers  each  time  their 
data  is  compromised.  Other 
states,  such  as  Delaware,  Ar¬ 
kansas  and  Florida,  require 
that  consumers  be  notified  of 
breaches  only  if  the  compa¬ 
nies  believe  there  is  a  reason¬ 
able  risk  of  harm. 

“The  good  news  with  these 
laws  is  that  security  incidents 
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are  more  public  and  more  vis¬ 
ible,  and  that’s  really  motivat¬ 
ing  companies  to  do  a  better 
job  of  protecting  data,”  said 
Kirk  Nahra,  a  board  member 
of  the  International  Associa¬ 
tion  of  Privacy  Professionals,  a 
group  of  IT  security  and  pri¬ 
vacy  workers  in  York,  Maine. 

But  while  there’s  value  in  in¬ 
forming  consumers  of  security 
breaches  that  pose  a  real  risk 
of  identity  theft  or  fraud,  little 
is  gained  by  overnotification, 
added  Nahra,  who  is  also  a 
partner  at  Wiley,  Rein  &  Field¬ 


ing  LLP  in  Washington. 

For  instance,  the  random 
loss  or  theft  of  a  laptop  or 
tape  containing  confidential 
data  poses  less  of  a  risk  than 
a  targeted  attack  against  a 
system  containing  terabytes 
of  customer  data,  Herath  said. 
Applying  the  same  disclosure 
standards  in  both  cases  may 
not  be  appropriate,  he  said. 

Paul  Rubin,  a  former  direc¬ 
tor  at  the  Federal  Trade  Com¬ 
mission  and  a  professor  of 
economics  and  law  at  Emory 
University,  argued  for  a  more 
precise  notification  standard, 
because  only  about  2%  of 
breach  victims  become  vic¬ 
tims  of  fraud  and  identity  theft. 
Indiscriminate  disclosures 
will  only  worry  consumers, 
who  may  place  fraud  alerts  on 
their  accounts  or  close  them, 
with  little  real  reason,  he  said. 

Allowing  breached  com¬ 
panies  to  make  judgments 
on  whether  data  might  be 
misused  will  never  work  in 
favor  of  consumers,  “because 
the  statute  of  limitations  on 
thieves  using  stolen  data  does 
not  expire,”  said  Arshad  Noor, 
CEO  of  StrongAuth  Inc.,  a 
compliance  management  firm 
in  Sunnyvale,  Calif.  > 


Todd  R.  Weiss  contributed  to 
this  story. 


Former  FTC  Member  Says  Data  Protection  Is  Inadequate 


BY  JAIKUMAN  VIJAYAN 

As  a  federal  trade  commis¬ 
sioner  between  1997  and  2005, 
Orson  Swindle  was  involved  in 
the  launch  of  the  Federal  Trade 
Commission’s  National  Do  Not 
Call  Registry  and  participated 
in  policy  deliberations 
about  information  secu¬ 
rity  and  privacy. 

Now  senior  policy 
adviser  and  chairman  at 
the  Center  for  Informa¬ 
tion  Policy  Leadership 
—  a  privacy  think  tank 
whose  members  include 
The  Proctor  &  Gamble 
Co.,  Eli  Lily  &  Co.  and 
Microsoft  Corp.  — 

Swindle  talked  with 
Computerworld  last  week 
about  some  of  the  privacy 
challenges  facing  corporate 
America. 


What’s  driving  the  privacy  agenda 
today?  In  the  past  year,  we’ve 
heard  about  some  hundred- 
plus  disclosed  security  breach¬ 
es,  about  hacking,  lost  laptops, 
lost  files,  disclosures  of  ac¬ 
count  numbers  and  even  com¬ 
puters  falling  off  the 
back  of  delivery  trucks. 
This  inadequate  protec¬ 
tion  of  sensitive  data  is 
just  unacceptable.  We 
have  got  to  collectively 
do  a  much  better  job  at 
it.  There’s  no  security 
initiative,  there’s  no 
new  law,  there’s  no  new 
technology  that’s  going 
to  solve  this  problem 
altogether. 

What  does  this  mean  for  business¬ 
es?  The  biggest  concern  for 
business  is  just  being  aware 


that  if  you  handle  information, 
you’ve  got  an  obligation  to 
protect  it.  The  Federal  Trade 
Commission  with  a  couple 
of  decisions  last  year  plainly 
stated  that.  Both  were  brought 
against  companies  not  for  a 
promise  not  kept  but  for  sim¬ 
ply  being  in  the  business  of 
collecting  and  using  informa¬ 
tion  that  is  sensitive  and  not 
taking  sufficient  precautions 
to  protect  that  information. 

What  sort  of  precedent  does 
ChoicePoint’s  S15  million  FTC 

fine  set?  That  case  is  quite  a 
bit  different.  In  the  Choice- 
Point  case,  there  were  lots  of 
things  that  were  violated  —  in 
particular,  the  Fair  Credit 
Reporting  Act.  That  carries 
monetary  penalties  that  can 
be  substantial  and,  in  this 


case,  obviously  were.  If  noth¬ 
ing  else,  it  certainly  should  be 
getting  people’s  attention.  Talk 
about  a  two-by-four  between 
the  eyes. 

What  is  the  overall  effect  of  these 
breaches?  We  know  that  mil¬ 
lions  of  people  have  had  their 
information  exposed,  bank 
accounts  depleted,  and  have 
had  to  go  through  the  trauma 
of  getting  their  credit  ratings 
squared  away. 

Then  there’s  the  firm  that 
failed  to  provide  adequate 
security  through  negligence 
or  inadequate  measures.  Ask 
ChoicePoint  how  much  it  cost 
them  not  having  it  done  ad¬ 
equately.  It’s  causing  consum¬ 
ers  to  lose  confidence  in  using 
information  technology.  That 
may  be  the  biggest  loss  of  all. 


How  is  this  steering  the  privacy 
debate  in  Congress?  There’s  the 
emotional  hue  and  cry  affect¬ 
ing  members  of  Congress  and 
state  legislatures  to  “do  some¬ 
thing.”  Unfortunately,  we  will 
see  some  onerous  legislation 
that  might  allow  some  politi¬ 
cal  figure  to  declare  victory 
and  walk  away.  But  legislation 
alone  is  not  going  to  solve  this 
problem. 

What  do  companies  need  to  do 
differently?  We  think  of  infor¬ 
mation  and  protecting  it  as 
protecting  our  stuff —  our  cor¬ 
porate  secrets,  the  Coca-Cola 
formula  and  things  like  that. 
But  today,  information  secu¬ 
rity  is  about  protecting  all  that 
other  stuff.  It’s  the  information 
we  use.  All  those  things  are 
points  of  vulnerability  that  the 
company  that  owns  the  infor¬ 
mation  is  responsible  for.  * 
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Information  lives  at  Toyota  Motorsport.  With  the  help  of  EMC,  they  raced  into  Formula  1  contention.  A  combination 

services,  and  systems  enabled  them  to  access  performance-critical  data  faster  and  easier.  So  now  the  team  can  reer 

■ 

between  races.  Manage  information  at  240-plus  miles  per  hour.  And  continuously  improve  their  car  and  their  results.  L 
help  you  turn  your  information  into  a  competitive  advantage.  Visit  www.EMC.com/ilm. 
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When  information 
comes  together, 

Toyota  can  build  a 
faster  car  in  two  weeks 
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Gateway  Agrees  to 
Settle  HP  Patent  Suit 

Gateway  Inc.  has  agreed  to  pay 
Hewlett-Packard  Co.  $47  million 
to  end  a  bitter  two-year  patent 
dispute  between  the  two  PC 
makers.  As  part  of  the  settle¬ 
ment,  the  companies  said  they 
would  sign  a  seven-year  cross- 
licensing  agreement.  The  settle¬ 
ment  ends  a  battle  that  included 
three  federal  court  lawsuits, 
three  International  Trade  Com¬ 
mission  investigations  and  one 
state  court  lawsuit. 


Oracle  Unveils 
Search  Engine 

Oracle  Corp.  unveiled  a  stand¬ 
alone  enterprise  search  offering 
at  Oracle  OpenWorld  Tokyo 
2006  last  week.  Oracle  Secure 
Enterprise  Search  lOg  targets 
corporations  seeking  to  ensure 
that  only  authorized  staffers 
can  access  sensitive  business 
information.  The  engine  can  be 
used  to  search  Oracle  databases, 
applications,  file  servers,  reposi¬ 
tories,  Web  portals  and  internal 
and  external  Web  sites. 


Cisco  Closes  Buy  of 
Scientific-Atlanta 

Cisco  Systems  Inc.  last  week 
completed  its  $7  billion  acquisi¬ 
tion  of  Scientific-Atlanta  Inc. 
Cisco  said  the  addition  of  the 
Lawrenceville,  Ga.-based  firm’s 
offerings  bolsters  its  goal  of 
providing  a  complete  data,  voice, 
video  and  mobility  infrastructure 
lineup.  Scientific-Atlanta  and  its 
CEO,  Jim  McDonald,  will  become 
part  of  Cisco’s  Routing  and  Ser¬ 
vice  Provider  Technology  Group. 


HP  Adds  Peregrine 
App  to  OpenView 

Hewlett-Packard  has  completed 
a  project  to  integrate  software  it 
gained  from  its  December  acqui¬ 
sition  of  Peregrine  Systems  Inc. 
into  its  own  line  of  asset  man¬ 
agement  software.  Peregrine's 
AssetCenter  has  been  combined 
with  HP’s  OpenView  Service 
Desk  software  and  will  moni¬ 
tor  various  systems  running  on 
a  network,  including  software, 
PCs  and  mainframes,  HP  said. 
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Do  Like  Letterman 
When  CRM . . . 

. . .  deployment  is  on  your  agenda.  That  is,  make  a  top  10 
list  of  required  features  and  stop  there.  “People  try  to 
do  too  much  with  CRM,”  observes  John  Carini,  CEO 
of  iEnterprises  Inc.  in  Murray  Hill,  N.J.  “Do  the  top  10 
things  people  do  every  day,  and  stop.  If  all  CRM  appli¬ 


cations  were  rolled  out  in 
that  fashion,  you’d  bring  more 
value  and  have  more  success.” 
Of  course,  he  says,  once  you 
get  those  10  things  right,  you 
can  do  more. 
But,  he  con¬ 
tends,  the  value 
of  each  subse¬ 
quent  item  on 
the  list  dimin¬ 
ishes  in  com¬ 
parison  with 
the  effort  it  re¬ 
quires.  Carini’s 
company  has  been  creating 
CRM  tools  for  Notes  users 
since  1995  and  wireless  CRM 
apps  for  the  past  five  years, 
and  he  concludes  that  the  best 
implementations  —  whether 
wireless  or  wired  —  have 
been  highly  focused  on 
achieving  specific  goals.  The 
CRM  on  the  Go  technology 
offered  by  iEnterprises  lets 
you  deploy  in-house  software 
as  well  as  Salesforce.com, 
Siebel  and  most  other  com¬ 
mercial  CRM  applications  on 
BlackBerry  handhelds,  and  it 
can  be  bought  as  either  a  ser¬ 
vice  or  as  packaged  software. 
Expect  to  see  CRM  on  the  Go 


on  Windows  Mobile  devices 
in  Q3  and  on  Symbian-based 
handhelds  by  year’s  end. 
Write  up  your  top  10  list  of 
got-to-have  mobile  features 
and  then  stop  scribbling.  An¬ 
nual  subscription  pricing 
starts  at  $200  per  user. 

Once  they’re  mobile, 
it’s  nice  to . . . 

. . .  know  that  you  can  kill  them. 

Not  end  users,  of  course.  Just 
their  devices.  You  can  do  that 
and  more  with  an  update  to 
Credant  Mobile  Guardian 
Enterprise  Edition,  a  mobile 
security  tool  sold  by  Cred¬ 
ant  Technologies  Inc.  in  Ad¬ 
dison,  Texas.  Richard  Stone, 
Credant’s  vice 
president  of 
marketing, 
said  Version  5.1 
lets  you  secure 
all  manner  of 
mobile  devices 
—  even  to  the 
point  of  send¬ 
ing  over-the- 
air  “kill”  signals  that  render 
them  useless.  Stone  says 
Credant’s  intelligent  software 
agents  can  run  on  everything 


STONE 

says  Credant 
gives  you  a 
license  to  kill. 
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Market  cap 
change  to 
public  com¬ 
panies  after 
security 
breaches,  says 
University  of 
Maryland. 


from  BlaekBerries  to  laptop 
PCs  and  enforce  security 
policies  that  you  set  from  a 
single  management  console. 
You  can  en¬ 
crypt  specific 
files  or  all 
the  data  on  a 
device.  You 
can  even  pass¬ 
word-protect 
files  on  USB 
fobs  or  iPods, 
he  says.  The 
update  also 
offers  support  for  two-factor 
authentication.  The  revision 
is  available  this  week  and 
starts  at  $42  per  user. 

Carrier-grade  and 

real-time  security . . . 

...  are  being  brought  to  the 
corporate  enterprise.  So  prom¬ 
ises  Arun  Chandra,  CEO  of 
iPolicy  Networks  Inc.  in  Fre¬ 
mont,  Calif.  He  says  iPolicy’s 
line  of  appliances  evaluates 
every  single  packet  on  your 
network  in  real  time  and  ap¬ 
plies  firewall, 
intrusion 
detection 
and  preven¬ 
tion,  virus 
protection 
and  other  security  measures 
controlled  from  a  console 
called  the  iPolicy  Security 
Manager.  With  an  ISM  Ver¬ 
sion  2.5  update  that  becomes 
available  today,  you  can 
virtualize  sales,  engineering 
and  other  business  domains 
across  physical  locations 
and  manage  them  as  a  single 
entity.  The  software  lets  you 
define  security  policies  on 
more  than  500  of  iPolicy’s  ap¬ 
pliances  worldwide.  You  can 
run  it  stand-alone  or  on  the 
company’s  new  ISM  Express 
1000  management  appliance, 
which  costs  $20,000. 

Everyone  knows  that 
the  trouble  with . . . 

. . .  software  development  is 
achieving  business  goals.  Where 
people’s  opinions  diverge  is 
on  how  to  ensure  that  you 


The  ISM  Express  1000  helps 
manage  global  security  policies. 


achieve  your  goals.  Take,  for 
example,  Colin  Armitage, 
CEO  of  Original  Software  Ltd. 
in  Basingstoke,  England. 
Armitage  says  that  you  should 
push  the  testing  of  business 
apps  into  the  hands  of  end 
users,  and  he  claims  that  his 
company’s  TestDrive-GoId 
product  is  intuitive  enough 
for  business  types  to  build 
tests  without  having  to  write 
scripts.  In  fact,  even  if  they 
wanted  to  write  scripts,  they 
couldn’t  with  TestDrive-Gold, 
because  there’s  no  scripting 
language  built  into  the  prod¬ 
uct,  Armitage  says.  It’s  all 
done  with  a  visual  user  inter¬ 
face.  The  software  lets  users 
see  how  an  app  functions  and 
then  report  back  to  develop¬ 
ers  about  what  they  like  and 
what  they  don’t.  Currently, 
the  product  works  only  with 
applications  on  IBM’s  iSeries 
systems.  But  Armitage  says 
that  he  expects  to  deliver  a 
version  this  year  for  any  apps 
built  on  Oracle  databases, 
regardless  of 
the  operating 
environment. 

An  average  sale, 
he  says,  starts  at 
about  $100,000. 

Adam  Warshaw,  president 
of  DataVelocity  Inc.  in  West 
Paterson,  N.J.,  contends 
that  you  still  need  to  give 
software  developers  tools 
to  judge  for  themselves  how 
their  handiwork  is  doing  in 
the  field.  Warshaw  says  the 
products  that  are  included 
in  DataVelocity’s  Erudition 
suite  let  developers  “score 
their  project  against  what  the 
business  wants.”  For  example, 
they  can  evaluate  proposed 
changes  to  an  application  and 
see  how  those  changes  would 
affect  dependencies  within 
the  program’s  code  and 
with  external  applications 
—  something  business  users 
hardly  concern  themselves 
with.  Erudition  will  be  avail¬ 
able  in  two  weeks  via  a  man¬ 
aged  service  starting  at  $50 
per  user  monthly.  * 


* 


MULTIPLE  PHONE  NUMBERS 
ARE  A  HASSLE  EVERYONE 
HAS  TO  LIVE  WITH. 


_  _ ■  ’ 


WITH  AVAYA  IP  TELEPHONY,  JUST 
ONE  NUMBER  CAN  REACH  YOU 
ANYTIME,  ANYWHERE.  ,,A  . 


or 


AVAyA 


COMMUNICATIONS 
AT  THE  HEART  OF  BUSINESS 


Virtual 

Technology 

Summit 


Discover  What’s  Possible  for  you  —  without  leaving  your 
desk  —  at  the  first-ever  Intelligent  Communications 
Technology  Summit  live  March  9th. 

BE  ONE  OF  THE  FIRST  S00  REGISTRANTS  AND  GET  A  FREE  THUMB 
DRIVE  LOADED  WITH  VALUABLE  INFORMATION. 


GO  TO  avaya.com/vtechsummit 


w.v: 


Global  companies  have  teams  everywhere.  To 
systems  and  software  put  everyone  on  the  same 


Running  a  global  company  requires  secure  worldwide 
information  sharing.  Luckily,  Xerox  has  a  solution  for 
everyone  on  your  team.  Using  Xerox  multifunction 


systems  and  Xerox  DocuShare®  software,  documents  can 
be  securely  scanned  to  the  Web.  This  way  people  through 
out  your  global  network  can  share  them.  This  keeps 


xerox.com/offfice/team  1-800-ASK-XEROX  ext.  753 


©2006  XEROX  CORPORATION.  All  rights  reserved.  XEROX*  WorkCentre*  DocuShare*  and  There's  a  new  way  to  look  at  it*  are  trademarks  of  XEROX  CORPORATION  in  the  United  States  and/or  other  countries. 


help  them  share  ideas,  Xerox  multifunction 
playing  field.  There’s  a  new  way  to  look  at  it. 


documents  current,  can  eliminate  warehousing  needs 
by  70%  and  can  reduce  order  fulfillment  time  by  80%. 
Whatever  Xerox  WorkCentre®  multifunction  system  you 


choose,  you’ll  reduce  costs  by  printing,  copying,  scanning 
and  faxing  from  one  convenient  network  device. 
Now  that’s  a  game  plan.  To  learn  more,  contact  us  today. 


XEROX. 


Technology 


Document  Management 


Consulting  Services 


14  COMPUTERWORLD  March  6, 2006 


BRIEFS 


Dassault  Agrees  to 
Purchase  MatrixOne 

French  firm  Dassault  Systemes 
SA  has  agreed  to  buy  product 
life-cycle  management  software 
developer  MatrixOne  Inc.  for 
S408  million  in  cash.  The  com¬ 
panies  have  not  decided  whether 
to  create  a  single  brand  for  their 
three  product  lines  -  Enovia, 
SmarTeam  and  MatrixlO  -  or  to 
retain  the  existing  brands.  Prod¬ 
uct  plans  will  be  disclosed  after 
the  close  of  the  deal,  which  is 
expected  in  June. 


Federal  IT  Worker 
Pleads  Guilty  to  Hack 

A  former  IT  systems  auditor  at 
the  U.S.  Department  of  Educa¬ 
tion  faces  a  five-year  prison 
sentence  on  a  computer  hacking 
charge  for  secretly  monitoring 
his  supervisor’s  e-mail  and  com¬ 
puter  use.  Kenneth  Kwak  plead¬ 
ed  guilty  to  unauthorized  access 
to  a  protected  computer  in  fur¬ 
therance  of  a  criminal  or  tortious 
act,  the  U.S.  Department  of  Jus¬ 
tice  said.  Kwak  was  a  systems 
auditor  in  the  agency’s  Office  of 
the  Inspector  General. 


BEA  Buys  BPM  App 
Maker  for  S87.5M 

BEA  Systems  Inc.  last  week  said 
it  has  acquired  Fuego  Inc.,  a 
developer  of  business  process 
management  software,  for 
S87.5  million.  The  Fuego  port¬ 
folio  of  products  will  be  folded 
into  BEA’s  AquaLogic  line  and 
will  be  the  foundation  of  BEA’s 
AquaLogic  Business  Service 
Interaction  product  family. 


PMC-Sierra  Buys 
Agilent  Storage  Unit 

PMC-Sierra  Inc.  last  week 
completed  its  $425  million  ac¬ 
quisition  of  the  storage  semicon¬ 
ductor  business  of  Agilent  Tech¬ 
nologies  Inc.  The  division  makes 
components  for  Fibre  Channel 
storage  systems,  including  its 
Tachyon  brand  of  Fibre  Channel 
controllers.  The  acquired  unit 
employs  about  240  people  and 
operates  design  centers  in  Santa 
Clara  and  Roseville,  Calif.,  and 
Singapore. 
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Katrina 

worries  about  this  year’s  hurri¬ 
cane  season,  even  while  many 
employers  continue  to  struggle 
to  find  IT  staffers  to  replace 
workers  who  left  the  region 
and  haven’t  returned. 

“I  have  a  great  concern  for 
this  coming  hurricane  season,” 
said  James  Mehaffey,  manager 
of  the  business  continuity  pro¬ 
gram  at  Blue  Cross  and  Blue 
Shield  of  Louisiana.  “In  the 
Gulf  Coast,  our  infrastructure 
is  severely  weakened.” 

Many  of  the  people  lead¬ 
ing  the  efforts  to  reinforce  IT 
systems  and  networks  have  al¬ 
ready  been  through  a  lot,  both 
professionally  and  personally. 

For  instance,  the  home  of 
David  Scripter,  regional  IT 
manager  of  URS  Corp.’s  New 
Orleans  operations,  was  lo¬ 
cated  near  a  breached  canal  in 
the  city.  “I  lost  my  house  and 
pretty  much  everything  I  own,” 
Scripter  said,  although  he 
added  that  at  least  he,  his  wife 
and  their  three  young  children 
were  all  safe  and  sound. 

From  a  business  standpoint, 
the  engineering  services 
firm’s  offices  were  inacces¬ 
sible  for  about  a  month  after 


SIX  MONTHS  LATER 


Without  the  commu¬ 
nications  leg  of  it,  no 
matter  which  data  center  we 
worked  out  of,  we  were  go¬ 
ing  to  be  dead  in  the  water. 

LARRY  MAYO,  VICE  PRESIDENT  OF  INFORMATION  TECHNOLOGIES, 
KEESLER  FEDERAL  CREDIT  UNION 


Katrina  struck  on  Aug.  29  and 
caused  devastating  flooding 
the  following  day.  Because 
its  systems  were  out  of  reach, 
URS  had  to  buy  new  hardware, 
especially  PCs  for  its  end  users, 
Scripter  said.  The  company 
set  up  remote  offices  in  Baton 
Rouge,  La.,  as  well  as  Houston 
and  Austin,  and  it  took  URS 
two  weeks  after  the  storm  to 
restore  its  IT  operations. 

Now  Scripter  is  back  in  New 
Orleans,  working  to  make 
certain  that  the  company 
could  recover  from  another 
catastrophic  storm  within  five 
days.  He  said  his  staff  has  in¬ 
stalled  a  storage-area  network 
in  New  Orleans  and  is  inves¬ 
tigating  how  to  mirror  the 
data  on  the  SAN  to  an  off-site 
location  in  another  state.  URS 
is  also  installing  a  system  that 


will  replicate  separate  Oracle 
databases  used  in  3-D  engi¬ 
neering  applications  to  remote 
locations.  “We’re  trying  to  get 
a  lot  of  this  stuff  in  place  by 
June  1,”  Scripter  said. 

Familiar  Ground 

Larry  Mayo,  vice  president  of 
information  technologies  at 
Keesler  Federal  Credit  Union 
in  Biloxi,  Miss.,  is  working  un¬ 
der  the  same  deadline. 

Keesler’s  headquarters 
building  lost  its  roof  and  most 
of  its  windows  to  Katrina,  but 
the  credit  union’s  data  center 
was  spared  because  it  was 
located  between  two  cement 
floors  in  the  middle  of  the 
building,  Mayo  said.  A  gen¬ 
erator  worked  throughout  the 
seven  days  that  the  company 
was  without  electricity,  and 


Mayo  took  steps  to  activate 
Keesler’s  disaster  recovery  hot 
site  in  Scottsdale,  Ariz. 

But  the  credit  union  decided 
not  to  go  live  with  the  hot  site 
because  of  the  widespread 
failure  of  voice  and  data  net¬ 
works  in  the  Gulf  Coast  region. 
“Without  the  communications 
leg  of  it,  no  matter  which  data 
center  we  worked  out  of,  we 
were  going  to  be  dead  in  the 
water,”  Mayo  said. 

As  a  result,  Keesler  is  install¬ 
ing  satellite  communications 
links  as  network  backups  at 
its  12  locations  in  the  U.S.  and 
three  offices  in  the  U.K.,  he 
said.  The  installations  have 
been  completed  at  three  facili¬ 
ties,  and  the  remainder  are  due 
to  be  finished  by  June  1. 

By  that  date,  the  credit  union 
also  expects  to  have  finished 
deploying  a  converged  voice 
and  data  network  that  will 
replace  an  aging  Cisco  data 
backbone  and  a  private  branch 
exchange  phone  system.  The 
converged  network,  which  was 
expedited  after  Katrina,  will 
be  able  to  work  over  the  satel¬ 
lite  links,  Mayo  said. 

The  day  after  Katrina  struck, 
Neal  Hennegan,  director  of 
technology  at  insurer  Gilsbar 
Inc.,  had  to  drive  60  miles 

Continued  on  page  16 


New  Orleans  IT  Vet:  Workers  Come  First 


IT  EMPLOYEES  throughout  the  University  of  Cal¬ 
ifornia's  10  campuses  and  administrative  offices 
know  firsthand  what  earthquakes  can  do. 

But  the  university  system's  IT  leaders,  whose 
units  support  some  121,000  faculty  members  and 
employees,  still  felt  they  could  learn  something 
more  about  natural  disasters  from  New  Orleans’ 
experience  last  summer. 

So  at  the  end  of  January,  John  Lawson,  for¬ 
merly  CIO  at  Tulane  University  in  New  Orleans, 
was  invited  to  speak  before  the  system’s  IT  leader¬ 
ship  council,  which  includes  CIOs  from  each  of 
the  schools,  about  his  experience  dealing  with 
Hurricane  Katrina. 

“I  thought  it  was  just  riveting,  compelling, 
and  if  we  don’t  listen  to  this  man,  we’re  idiots,” 
said  Paul  Weiss,  who  heads  technology  sup¬ 
port  services  for  the  2,000  employees  of  the 
university  system’s  office  of  the  president  in 


Oakland,  Calif.  “He's  lived  reality.” 

Lawson’s  most  important  point,  according  to 
Weiss,  was  that  IT  operations  must  first  restore 
contact  with  employees  after  a  disaster  hits. 

The  University  of  California  system,  with  its 
statewide  high-speed  networks,  can  easily  build 
alternative  systems  and  create  Web  sites  that  can 
be  used  as  points  of  contact,  Weiss  said.  Most 
employees  will  be  able  to  find  some  means  to  ac¬ 
cess  e-mail,  he  said. 

Nonetheless,  Weiss  said  Lawson's  remarks 
prompted  a  review  of  the  employee  communica¬ 
tions  plan  to  make  sure  it’s  up  to  speed. 

Several  IT  managers  interviewed  last  week 
about  the  state  of  IT  operations  in  New  Orleans 
agreed  that  the  first  action  in  a  disaster  should  be 
to  check  in  with  employees,  because  nothing  hap¬ 
pens  without  them. 

Lawson  said  in  an  interview  that  Tulane  quickly 


created  an  employee  registration  process  after  Ka¬ 
trina  hit  because  “we  cared  about  our  employees 
-  we  wanted  to  know  where  they  were,  and  were 
they  safe.” 

Rick  Omartian,  IT  chief  financial  officer  and 
chief  of  staff  at  The  Guardian  Life  Insurance  Com¬ 
pany  of  America  in  New  York,  said  that  the  most 
important  asset  of  any  organization  is  its  workers, 
whose  safety  should  be  management’s  top  priority. 

“The  business  will  quickly  collapse  without  its 
people,  even  if  the  company  deploys  the  most 
advanced  technology,  alternative  workspace  plans 
and  disaster  recovery  data  centers,”  Omartian  said. 

The  law  firm  of  Adams  and  Reese  LLP,  which 
had  offices  and  a  data  center  in  New  Orleans,  cre¬ 
ated  a  disaster-relief  fund  of  $200,000  to  assist 
affected  employees,  said  CIO  David  Erwin. 

“There  was  even  a  team  of  people  assisting  em¬ 
ployees  with  locating  housing,  schools,  churches, 
banks  and  whatever  was  needed,”  he  said. 

-PATRICK  THIBODEAU 
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Katrina 

from  his  office  in  Covington, 
La.,  to  find  a  working  phone 
so  he  could  declare  a  disaster 
and  authorize  hot-site  operator 
SunGard  Data  Systems  Inc.  to 
switch  his  IT  operations  to  a 
Chicago  data  center. 

Like  many  IT  managers 
who  experienced  the  storm 
and  its  aftermath,  Hennegan 
can  quickly  list  the  things  he 
did  right  and  the  things  he  has 
since  addressed.  For  instance, 
he  was  especially  pleased  that 
Gilsbar  had  tested  its  SunGard 
backup  capabilities  before 
Katrina  struck,  because  that 
helped  avoid  start-up  delays  at 
the  hot  site.  But  Hennegan  said 
he  plans  to  send  IT  employees 
to  Chicago  in  advance  of  any 
future  storms  “and  empower 
them  to  declare  a  disaster 
without  talking  to  us.” 

Even  at  a  company  like 
Blue  Cross  and  Blue  Shield  of 
Louisiana,  which  had  invested 
heavily  in  business  continuity 
capabilities,  Katrina  managed 
to  expose  issues.  For  instance, 


the  health  insurer  used  diverse 
routing  techniques  on  its  net¬ 
works  but  wasn’t  aware  that 
at  one  point  they  all  went  to  a 
common  physical  site  in  New 
Orleans,  MehafFey  said. 

At  the  University  of  New 
Orleans,  IT  workers  couldn’t 
begin  returning  to  the  school’s 
campus  until  mid-November, 
said  Jim  Burgard,  assistant 
vice  chancellor  for  uni¬ 
versity  computing  and 
communications.  And  it 
wasn’t  until  the  start  of 
January  that  all  of  those 
who  remained  on  the  IT 
staff  were  back  working 
on  campus,  he  said. 

Even  now,  the  uni¬ 
versity  is  still  running 
its  mission-critical  ap¬ 
plications  at  Louisiana  State 
University  in  Baton  Rouge  on 
25  servers  —  some  taken  from 
its  own  data  center,  and  some 
donated  by  LSU.  But  the  New 
Orleans  school  is  installing  an 
uninterruptible  power  supply 
and  a  new  generator  powered 
by  natural  gas  at  its  own  facili¬ 
ties,  Burgard  said.  When  that 
work  is  completed  in  about  six 
to  eight  weeks,  the  applications 


must  replace 
eight  of  45  IT 
workers. 


at  LSU  will  be  shifted  back  to 
the  campus  in  New  Orleans. 

But,  Burgard  added,  the  uni¬ 
versity  plans  to  leave  the  serv¬ 
ers  in  place  in  Baton  Rouge 
and  mirror  data  to  them  so  that 
the  LSU  location  can  function 
as  a  hot  site  if  another  disaster 
occurs.  That  strategy  is  also 
geared  toward  eliminating 
some  of  the  problems  the  uni- 

_  versity  had  retrieving  its 

backup  tapes  after  Ka¬ 
trina,  he  said.  Although 
the  school  didn’t  lose 
any  data,  it  had  to  wait 
three  weeks  to  access 
the  tapes,  which  were 
stored  on  the  sixth  floor 
of  a  building  in  down¬ 
town  New  Orleans 
Meanwhile,  Burgard 
is  still  trying  to  replace  eight 
IT  workers  —  nearly  one-fifth 
of  his  45-person  staff.  A  recent 
advertisement  for  a  senior  net¬ 
working  position  that  before 
the  storm  would  likely  have 
garnered  about  20  resumes 
netted  just  four,  he  said.  In  ad¬ 
dition,  he  received  only  two 
resumes  for  a  senior  database 
administrator  slot. 

Also  working  to  fill  IT 


Temporary  Locations  Are 
Still  Home  to  Some  IT  Ops 


THE  PHYSICAL  DISLOCATIONS 
that  were  caused  by  Hurricane  Ka¬ 
trina  are  forcing  IT  managers  such 
as  Jim  Burgard  to  address  problems 
as  basic  as  how  to  get  their  staffers 
from  one  place  to  another. 

Burgard.  assistant  vice  chancellor 
for  university  computing  and  com¬ 
munications  at  the  University  of  New 
Orleans,  struggled  after  the  storm  to 
find  a  way  to  get  IT  workers  to  Baton 
Rouge,  where  the  school  set  up  a 
makeshift  data  center  at  Louisiana 
State  University  that  it  is  still  using. 

Finding  places  for  them  to  live 
there  was  also  a  challenge,  he  said. 
Several  employees  who  owned 
RVs  used  them  as  their  temporary 
residences  in  Baton  Rouge.  Burgard 
himself  commuted  four  hours  a  day 
round-trip  between  his  temporary 


home  in  Crowley,  La„  and  Baton 
Rouge.  Now  he’s  grappling  with  the 
transportation  and  housing  issues 
as  part  of  developing  a  new  disaster 
recovery  plan  for  the  university. 

Hancock  Bank  has  been  running 
its  IT  operations  from  a  building  in 
Gulfport,  Miss.,  that  housed  its  train¬ 
ing  staff  before  the  hurricane,  said 
Rodney  Sandoz,  senior  technology 
officer  at  the  bank. 

The  bank’s  headquarters  building, 
which  includes  its  data  center,  was 
rendered  uninhabitable  by  the  hur¬ 
ricane.  Until  Nov.  11,  Hancock  used 
hot  sites  in  Chicago  and  Atlanta  to 
keep  its  systems  running.  None  of  the 
bank’s  hardware  was  damaged  in  the 
storm,  and  it  recovered  all  of  its  data, 
but  Sandoz  said  officials  are  trying  to 
better  prepare  for  future  emergencies. 


“We  are  in  the  process  of  review¬ 
ing  what  we  did  and  making  plans  to 
have  a  smoother  transition,”  Sandoz 
said.  He  added  that  the  strategy  will 
include  replicating  critical  files  and 
information  to  lessen  the  downtime 
associated  with  data  backup-and- 
restore  operations. 

In  addition,  the  bank  is  eyeing  sat¬ 
ellite  communications  to  augment  its 
voice-over-IP  network  as  part  of  an 
effort  to  avoid  losing  telecommunica¬ 
tions  capabilities  if  carrier  networks 
are  damaged.  Sandoz  said  that  as 
recently  as  late  November,  some  of 
Hancock's  110  branches  were  still 
experiencing  telecommunications 
problems.  “When  those  circuits  went 
down,  we  couldn’t  communicate 
except  by  radio  phone,”  he  said. 

-  HEATHER  HAVENSTEIN 


positions  is  Ochsner  Clinic 
Foundation,  which  operates  a 
600-bed  hospital  on  its  main 
campus  in  New  Orleans  and  35 
clinics  throughout  Louisiana. 
Ochsner  lost  23  workers  from 
its  150-member  IT  staff  after 
the  storm,  said  Bill  Saussaye, 
director  of  information  servic¬ 
es  operations.  The  health  care 
provider  has  managed  to  fill 
some  application  development 
jobs  with  local  people  but  is  us¬ 
ing  contractors  to  temporarily 
fill  positions  in  networking  and 
communications,  he  said. 

Ochsner  is  aiming  to  com¬ 
plete  several  disaster  recovery 
projects  before  June.  One 
involves  the  installation  of 
redundant  Freon  and  chilled- 
water  cooling  systems  in  the 
company’s  primary  data  center 

—  a  plan  prompted  by  its  inabil¬ 
ity  at  times  to  generate  enough 
power  to  chill  the  water  in  the 
existing  system  after  Katrina 
hit.  Saussaye  said  he  is  also 
looking  to  set  up  a  remote  data 
center  at  least  100  miles  from 
New  Orleans  and  hot  sites  for 
Ochsner’s  distributed  systems. 

Jan  Rideout,  CIO  at  North¬ 
rop  Grumman  Corp.’s  Ship 
Systems  unit,  lost  her  Missis¬ 
sippi  home  to  Katrina’s  fury. 
She  said  that  if  there’s  a  bright 
side  to  the  storm  for  her,  it’s 
that  the  disaster  prompted 
the  Ship  Systems  operation 

—  which  has  facilities  in  New 
Orleans  —  to  accelerate  a  plan 
to  replace  networking  cables 
with  wireless  technology. 

Disaster  recovery  plans  have 
to  be  flexible  and  must  take 
an  organization’s  ability  to 
respond  into  account,  Rideout 
said.  For  instance,  many  plans 
assume  that  employees  will 
be  available  after  a  disaster 
occurs.  But  when  the  air  con¬ 
ditioners  in  Northrop  Grum- 
man’s  data  center  stopped 
working  after  Katrina,  Ride¬ 
out  said,  there  weren’t  any 
employees  on  hand  who  knew 
how  to  gracefully  shut  down 
the  servers. 

That  points  to  the  challeng¬ 
es  that  Rideout  and  other  Gulf 
Coast  IT  managers  are  facing 
as  they  scramble  to  shore  up 


Disaster 
Sharpens 
Views  of 
IT’s  Value 

ONE  POSITIVE  LEGACY  of 

Hurricane  Katrina,  IT  managers 


Nancy  Kuo,  IT  director  atM.S. 
Antiques  LLC,  a  large  retailer  ir 
French  Quarter  of  New  Orleans 
Kuo  said  business  continuity  is 
sues  have  moved  to  the  forefrc 
at  M.S.  Ran  in  Katrina’s  wake. 


RackspaceLti 
Kuo  said  th 


Rizwan  Ahmed,  CIO  at  the 
Louisiana  state  government’s 
Office  of  Group  Benefits  in  Ba 
Rouge,  said  Katrina  was  “mor 


IT  staffs.  “Th 


ople  will  get  thir 
nc."  Ahmed  sai 


their  systems,  networks  and 
data-protection  mechanisms 
so  their  companies  can  with¬ 
stand  another  major  storm. 

“There  is  not  ever  going 
to  be  the  perfect  disaster- 
recovery  plan,”  Rideout  said. 
“You  can’t  write  the  perfect 
script,  and  the  next  time  will 
be  different.  And  I  don’t  think 
we  can  forecast  and  predict 
every  combination.”  * 
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Satyam  Expands  in 
China  as  Costs  Rise 

HYDERABAD,  INDIA 

lATYAM  COMPUTER  Services  Ltd. 
dast  week  announced  plans  to 
^expand  its  Chinese  software  de¬ 
velopment  operations  in  order  to  offset 
rising  IT  labor  costs  in  India. 

Virender  Aggarwal,  director  and 
senior  vice  president  for  the  Asia- 
Pacific  region,  the  Middle  East,  India 
and  Africa  at  Hyderabad-based  Satyam, 
said  the  IT  services  firm  will  open  a 
development  center  in  Guangzhou, 
China,  to  build  custom  software  for 
customers  in  southern  China.  A  larger 
office  campus  will  be  set  up  in  an  as  yet 
undetermined  city  to  serve  companies 
worldwide,  Aggarwal  said. 

Satyam  plans  to  dramatically  in¬ 
crease  its  Chinese  workforce  over  the 
next  three  years,  according  to  Aggar¬ 
wal.  “I  can’t  give  a  figure  of  the  number 
of  staff  we  will  hire  in  China,  but  it  will 
be  in  multiples  of  thousands,”  he  said. 

The  company  currently  has  about 
270  employees  in  China  at  a  software 
development  center  in  Shanghai  and 
smaller  facilities  in  Beijing  and  Dalian. 

Offshore  outsourcing  and  IT  ser¬ 
vices  firms  have  little  choice  but  to  ex¬ 
pand  in  China  because  of  the  increas¬ 
ing  labor  costs  in  India,  Aggarwal  said. 
However,  he  noted  that  Satyam  isn’t 
likely  to  expand  its  Shanghai  facility 
because  personnel  costs  are  rising  in 
that  city  as  well. 

■  JOHN  RIBEIR0,  IDG  NEWS  SERVICE 

MySQL  Buys  Web  Tools 
Vendor,  Adds  Two  Execs 

UPPSALA,  SWEDEN 

Open-source  database  devel¬ 
oper  MySQL  AB  announced  that 
it  has  acquired  Netfrastructure 
Inc.,  a  small  vendor  of  tools  for  build¬ 
ing  Web-based  applications.  The  price 
MySQL  paid  for  Manchester,  Mass.- 
based  Netfrastructure  wasn’t  disclosed. 

Uppsala-based  MySQL  also  said  it 
has  hired  Netfrastructure  founder  Jim 
Starkey  as  its  senior  software  architect. 
Earlier  in  his  career,  Starkey  founded 
InterBase  Software  Corp.  and  devel¬ 
oped  its  namesake  relational  database. 
InterBase  was  one  of  the  first  databases 
to  use  event  alerts  and  triggers  and  in¬ 
clude  support  for  binary  large  objects. 

Starkey  also  participated  in  the  de¬ 
velopment  of  the  former  Digital  Equip¬ 


ment  Corp.’s  RDB  database. 

In  addition,  MySQL  named  Taneli 
Otala  its  chief  technology  officer.  Otala 
previously  was  CTO  at  SenSage  Inc.,  a 
San  Francisco-based  vendor  of  security 
analytics  tools,  and  he  earlier  worked 
as  a  development  manager  at  Oracle 
Corp. 

MySQL’s  acquisition  of  Netfrastruc¬ 
ture  follows  Oracle’s  recent  purchases 
of  two  open-source  database  vendors, 
Innobase  Oy  and  Sleepycat  Software 
Inc.  Both  of  those  firms  offered  storage 
engines  that  can  be  used  with  MySQL. 

■  JAMES  NICC0LAI,  IDG  NEWS  SERVICE 

Ericsson  Sues  Samsung 
Over  License  Dispute 

STOCKHOLM 

LM  ERICSSON  Telephone  Co.  said  it 
has  filed  lawsuits  in  four  countries 
against  Samsung  Electronics  Co. 
after  the  two  vendors  failed  to  reach  a 
new  agreement  on  royalty  payments 
for  Samsung’s  use  of  mobile  technology 
covered  by  Ericsson  patents. 

“Unfortunately,  we  had  to  file  the 
lawsuits  because  we  haven’t  been  able 
to  agree  to  a  renewal  of  our  licenses 
with  Samsung,  which  expired  at  the 
end  of  the  year,”  said  Peter  Olofsson, 
a  spokesman  for  Stock¬ 
holm-based  Ericsson. 

The  lawsuits  were  filed 
in  Germany,  the  Nether¬ 
lands,  the  U.K.  and  the 
U.S.  Olofsson  declined 
to  disclose  the  amount 
of  money  that  Ericsson 
is  seeking  from  Sam¬ 
sung,  which  couldn’t  be 
reached  for  comment  on 
the  lawsuits. 

The  two  companies 
signed  a  license  agreement  in  2002  al¬ 
lowing  Samsung  to  use  patents  held  by 
Ericsson  on  technologies  such  as  the 
Global  System  for  Mobile  Communi¬ 
cations  and  the  General  Packet  Radio 
Service,  according  to  Olofsson. 

■  JOHN  BLAU,  IDG  NEWS  SERVICE 

India  Looks  to  Attract 
More  High-Tech  Firms 

NEW  DELHI 

INDIA’S  GOVERNMENT  plans  to  of¬ 
fer  a  set  of  financial  incentives  in  an 
effort  to  lure  more  high-tech  manu¬ 
facturers  to  set  up  operations  in  the 
country. 


INDIA  will 
offer  fund¬ 
ing  to  offset 
infrastructure 
problems,  says 
Chidambaram, 
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The  number  of  mobile 
phone  subscribers  in  China 
as  of  January. 


Indian  Finance  Minister  Shri  P.  Chi¬ 
dambaram  told  the  country’s  parlia¬ 
ment  last  week  that  the  government 
plans  to  assist  high-tech  manufacturers 
by  investing  in  firms  and  offering  “via¬ 
bility  gap  funding.”  The 
latter  is  aimed  at  offset¬ 
ting  costs  incurred  by 
new  ventures  because 
of  India’s  infrastruc¬ 
ture  problems,  which 
include  poor  roads,  port 
facilities  and  communi¬ 
cations  capabilities. 

The  incentives  will 
be  available  for  three 
years,  Chidambaram 
said.  Some  went  into 
effect  last  week,  while 
others  depend  on  parliament  approval 
of  India’s  annual  budget,  which  is  ex¬ 
pected  within  the  next  week  or  so. 

Several  major  chip  makers,  including 
Intel  Corp.  and  Texas  Instruments  Inc., 
have  design  facilities  in  India.  But  they 
have  been  reluctant  to  set  up  fabrica¬ 
tion  plants  in  the  country,  partly  be¬ 
cause  of  the  infrastructure  issues. 

■  JOHN  RIBEIR0,  IDG  NEWS  SERVICE 

State  Agency  Begins 
IT  Integration  Project 

SYDNEY,  AUSTRALIA 

IN  AN  effort  to  streamline  its  IT  op¬ 
erations,  the  Department  of  Educa¬ 
tion  and  Training  in  the  Australian 

_  state  of  New  South 

Wales  has  launched  an 
effort  to  integrate  a  mix 
of  mainframes  and  other 
systems. 

A  spokesman  for  the 
NSW  DET  confirmed 
that  the  data-integration 
project  is  under  way  but 
wouldn’t  provide  any  de¬ 
tails  because  “the  project 
has  only  just  begun.” 

A  source  said  the 
agency  began  work  in  January  and 
plans  to  integrate  data  from  “numer¬ 
ous  disparate  systems,  including  older 
mainframes.”  The  NSW  DET  is  using 
integration  software  from  IBM  and 
Redwood  City,  Calif.-based  Infor- 
matica  Corp.  as  part  of  the  project,  the 
source  said. 

The  project  also  calls  for  installing 
an  Oracle  lOg  database  cluster  running 
on  Red  Hat  Linux  servers  from  either 
IBM  or  Hewlett-Packard  Co.,  according 
to  the  source.  » 

■  RODNEY  GEDDA, 

COMPUTERWORLD  TODAY  (AUSTRALIA) 
Compiled  by  Mike  Bucken. 


Briefly  Noted 

JBoss  Inc.  has  purchased  Object- 
one  GmbH,  a  Berlin-based  systems 
integrator,  in  an  effort  to  establish  a 
stronger  footing  in  one  of  Europe’s 
fastest-growing  markets  for  open- 
source  software.  Objectone  is  a 
JBoss  partner  that  sells  subscrip¬ 
tion  and  support  services  for  the 
Atlanta-based  software  vendor’s 
products.  The  integrator  was  re¬ 
named  JBoss  Deutschland  GmbH, 
effective  last  Wednesday. 

■  JOHN  BLAU,  IDG  NEWS  SERVICE 


Oracle  Corp.  said  it  plans  to  set  up 
a  business  unit  in  the  Asia-Pacific 
region  that  will  focus  on  embedding 
the  company’s  software  in  home  ap¬ 
pliances  and  other  products.  Devel¬ 
opers  assigned  to  the  unit  will  work 
at  existing  design  centers  in  several 
countries.  Oracle,  which  already 
offers  three  embedded  databases, 
said  it  plans  to  develop  embedded 
versions  of  its  lOg  Enterprise  data¬ 
base  and  application  server  soft¬ 
ware  over  the  next  12  months. 

■  SUMNER  LEMON, 

IDG  NEWS  SERVICE 


Intel  Corp.  plans  to  invest  S300 
million  (U.S.)  to  build  a  chip  assem¬ 
bly  and  testing  plant  in  Ho  Chi  Minh 
City,  Vietnam.  Construction  will  be¬ 
gin  immediately  on  the  plant,  which 
will  be  the  first  factory  of  its  kind 
built  in  Vietnam.  It  will  eventually 
employ  1,200  mostly  Vietnamese 
workers,  Intel  said. 

■  DAN  NYSTEDT,  IDG  NEWS  SERVICE 


Sony  Corp.  and  NEC  Corp.  have 
agreed  to  combine  their  optical  disk 
drive  businesses  into  a  single  com¬ 
pany.  Sony  will  own  55%  of  the  new 
company,  which  will  be  called  Sony 
NEC  Optiarc  Inc.  and  begin  opera¬ 
tions  on  April  3. 

■  MARTYN  WILLIAMS, 

IDG  NEWS  SERVICE 


Hon  Hai  Precision  Industry  Co.  will 
spend  $110  million  to  build  several 
IT  manufacturing  facilities  in  Tamil 
Nadu  state  in  southern  India,  ac¬ 
cording  to  Dayanidhi  Maran,  India's 
minister  for  communications  and 
information  technology.  Taipei, 
Taiwan-based  Hon  Hai  will  manufac¬ 
ture  mobile  phones  and  other  prod¬ 
ucts  in  India.  The  facilities  being 
set  up  in  Tamil  Nadu  are  expected 
to  create  more  than  10,000  jobs, 
Maran  said. 

■  JOHN  RIBEIR0  AND  DAN  NYSTEDT, 
IDG  NEWS  SERVICE 


Innovations  by  InterSystems 


Multidimensional  Database  Finds  Rapid  Integration  Platform 

Healthcare  Records  In  A  Flash.  For  Electronic  Health  Records. 


Imagine  being  able  to  rapidly  develop  applications 
that  run  much  faster,  with  massive  scalability. 

Now  you  can,  with  our  multidimensional  database 
for  transaction  processing  and  real  time  analytics. 

Only  Cache  combines  robust  objects  and  robust 
SQL,  thus  eliminating  object-relational  mapping. 

It  requires  little  administration,  delivers  speed  and 
scalability  on  minimal  hardware,  and  comes  with  a 
rapid  application  development  environment. 

These  innovations  mean  faster  time-to-market, 
lower  cost  of  operations,  and  higher  application 
performance.  We  back  these  claims  with  this 
money- back  guarantee:  Buy  Cache  for  new 
application  development,  and  for  up  to  one  year  you 
can  return  your  license  for  a  full  refund  if  you  are 
unhappy  for  any  reason.  * 

Innovative  database.  Guaranteed  performance. 


Imagine  being  able  to  get  your  applications  to 
perform  together  as  an  ensemble.  Easily. 

Now  you  can,  with  our  universal  integration 
platform. 

Ensemble  is  the  first  fusion  of  an  integration  server, 
data  server,  application  server,  and  portal  development 
software  -  in  a  single,  seamless  product.  This  is  the 
complete  ensemble  of  technologies  needed  for  rapid 
integration,  fast  development,  and  easy  management. 

These  innovations  mean  all  of  your  integration 
projects  will  be  completed  on  time  and  on  budget, 
with  a  simplified  learning  curve  for  your  IT  staff. 

We  back  these  claims  with  this  money-back  guarantee: 
For  up  to  one  year  after  you  purchase  Ensemble ,  if  you 
are  unhappy  for  any  reason,  we’ll  refund  100%  of  your 
license  fee.  * 

Innovative  integration.  Guaranteed  performance. 


InterSystems  f  InterSystems 

CACHE  ENSEMBLE 


Come  see  a  presentation  on  Healthcare  Integration  '  . 

by  William  Lewkowski,  CIO  of  Metro  Health,  on  March  6th  at  Premier  100  in  the  Springs  Ballroom  Salon  A-C 


For  a  free  copy  of  CACHli,  or  to  request  a  free  ENSEMBLE  proof-of-concept  project,  visit  www.InterSystems.com/Free7A 

•Read  about  our  money-back  guarantees  at  the  web  page  shown  above.  ©  2006  InterSystems  Corporation.  All  rights  reserved.  InterSystems  Cache  and  InterSystems  Ensemble  arc  trademarks  of  InterSystems  Corporation.  206  ComboInno7CoWu 
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Sun  Blames  State  Department 
Concerns  for  Latest  Grid  Delay 


Says  government  security  fears  and 
restrictions  force  changes  in  plan 


BY  ROBERT  McMILLAN 

SECURITY  CONCERNS 
expressed  by  the  U.S. 
Department  of  State 
have  further  delayed 
the  rollout  of  Sun  Microsys¬ 
tems  Inc.’s  computer  grid,  a 
Sun  executive  confirmed  late 
last  month. 

The  company  had  planned 
to  implement  the  Sun  Grid 
initiative  in  early  2005,  but  the 
State  Department’s  worries 
and  other  issues  caused  it  to 
delay  its  unveiling  and  make 
changes  to  the  original  plan, 
said  Jonathan  Schwartz,  Sun’s 
president  and  chief  operating 
officer. 

“It  turned  out  to  be  much 
harder  than  we’d  originally 
expected,”  Schwartz  said  at  a 
Feb.  24  press  event  in  Menlo 
Park,  Calif. 

“Our  servers  are  considered 
munitions  by  the  federal  gov¬ 
ernment,”  Schwartz  said.  “So 
when  we  wanted  to  provision 
servers  off  of  our  computers  to 
a  global  population,  the  federal 
government  got  involved  and 
said,  ‘We’d  like  to  know  all  the 
people  who  use  this.’  ” 

The  company  had  cited  a 
lack  of  computing  resources 
when  it  first  delayed  the  imple¬ 
mentation  early  last  year. 

Rollout  ‘Imminent’ 

A  Sun  spokesman  said  last 
week  that  the  rollout  of  Sun 
Grid,  which  will  supply  proc¬ 
essing  and  storage  capabilities 
for  $1  per  hour,  is  “imminent.” 

The  updated  plan  requires 
that  customers  who  buy  ac¬ 
cess  to  the  grid  wait  24  hours 
before  using  it  so  that  Sun  can 
ensure  that  they  are  not  in  vio¬ 
lation  of  export  controls.  Sun 
can’t  allow  access  to  users  in 
certain  countries,  according  to 
State  Department  rules. 

The  State  Department  re¬ 
strictions  will  also  prevent  the 
product  from  becoming  the 


global  grid  once  envisioned  by 
Sun.  Instead,  Sun  now  plans 
to  roll  out  a  U.S.-only  version 
of  the  product,  followed  by 
different  offerings  for  other 
regions  of  the  world. 

Despite  its  missed  deadlines, 
Sun  still  has  high  hopes  for  the 
grid  offering. 

For  example,  Sun’s  product 
could  still  be  useful  for  com¬ 
panies  that  want  to  do  high- 
performance  computing  tasks 
but  lack  the  technical  exper¬ 
tise,  said  Gerry  Vest,  a  systems 
administrator  at  the  Southwest 
Foundation  for  Biomedical  Re¬ 


search  in  San  Antonio. 

“If  you  don’t  have  staff  on 
hand  or  infrastructure  for  do¬ 
ing  this,  it’s  a  real  steep  hill  to 
climb  just  to  get  your  feet  in 
the  water,”  he  said. 

Credibility  Issues 

On  the  other  hand,  the  year¬ 
long  wait  has  hurt  Sun’s  cred¬ 
ibility,  even  though  the  State 
Department  concerns  appear 
“legitimate,”  said  Jonathan 
Eunice,  principal  analyst  at  re¬ 
search  firm  Illuminata  Inc.  in 
Nashua,  N.H. 

“Sun  Grid  is  pretty  much  a 
laughingstock,  because  they 
announced  it  multiple  times 
and  they  failed  multiple  times 
to  deliver  it,”  Eunice  said. 


Eunice  said  that  customers 
may  be  reluctant  to  adopt  the 
Sun  service  as  they  weigh  the 
compliance  and  security  is¬ 
sues  raised  by  this  type  of  grid 
computing.  “It’s  not  so  much 
a  calculated  security  equation 
as  an  icky  feeling  about  doing 
things  differently,”  he  said. 

Sun  CEO  Scott  McNealy 
said  that  this  kind  of  hesitation 
ultimately  scuttled  a  Sun  Grid 
deployment  with  a  bank  he 
declined  to  identify.  The  bank 
made  so  many  security-  and 
compliance-related  demands 
that  Sun  eventually  walked 
away  from  the  deal,  he  said. 

It  could  take  an  exceptional 
event  to  finally  move  a  large 
number  of  customers  over 


Disaster  Communications  Still  Lacking,  Panel  Says 


Hurdles  remain 
six  months  after 
Hurricane  Katrina 

BY  MATT  HAMBLEN 

CAMBRIDGE.  MASS. 

Six  months  after  Hurricane 
Katrina  hit  the  Gulf  Coast, 
the  country  is  a  bit  better 
prepared  for  a  major  disaster 
—  but  numerous  obstacles 
remain,  a  panel  of  communi¬ 
cations  experts  said  late  last 
month. 

The  complexity  of  modern 
communications  networks, 
both  wired  and  wireless, 
makes  responding  to  a  disaster 
not  only  technically  difficult 
but  politically  and  culturally 
troublesome  as  well,  said  An¬ 
drew  Lippman,  director  of  the 
MIT  Media  Lab. 

The  roundtable  discussion 
of  emergency  preparedness  is¬ 
sues,  sponsored  by  Avaya  Inc., 
a  Basking  Ridge,  N.J.-based 
maker  of  communications 
networks,  included  commu¬ 
nications  specialists  from  the 
public  and  private  sectors. 

The  panelists  agreed  that 
there  remain  enormous  ob¬ 
stacles  to  building  an  adequate 


widespread  disaster  response 
program.  For  example,  the  task 
of  ensuring  radio  interoper¬ 
ability  among  local,  state  and 
federal  agencies  could  take 
years  to  complete. 

Lippman  noted  that  the 
response  to  the  1906  San  Fran¬ 
cisco  earthquake  was  more 
efficient  than  the  emergency 
efforts  that  followed  Katrina  in 
New  Orleans.  At  a  time  when 
communications  technologies 
were  limited,  a  single  entity 
—  the  U.S.  Army  —  quickly 
took  control  of  emergency 
operations. 

“In  those  days,  communi¬ 
cations  didn’t  exist,  with  no 
phones  in  homes  or  pockets. 
They  didn’t  have  TV.  And  yet 
command  and  control  worked,” 
Lippman  said. 

Kevin  Prendergast,  vice 
president  of  northeast  op¬ 
erations  at  American  Medical 
Response  (AMR),  the  nation’s 
largest  ambulance  service,  said 
his  workers  often  lacked  links 
to  disaster  recovery  officials 
during  the  company’s  efforts  to 
help  out  after  Katrina  hit.  AMR 
sent  67  ambulances  to  New  Or¬ 
leans  following  the  hurricane 
only  to  find  spotty  cellular 


What’s  Needed 

FOR  BETTER  RESPONSE 
TO  DISASTERS 

■  Interoperable  radios  for 

first  responders. 

■  Increase  in  spectrum 

dedicated  to  public  safety. 

■  Advance  coordination 

by  private-sector  infrastructure 
providers. 

■  Abundant  and  inexpensive 
end-user  devices  capable  of 
providing  the  user’s  position 
and  radio  contact. 


FROM  EXPERTS  AT  PANEL  DISCUSSION 
SPONSORED  BY  AVAYA  INC. 


service  and  incompatibility  be¬ 
tween  emergency  radios. 

“It  was  a  tremendous 
burden  on  command  folks,” 
Prendergast  said.  “Command 
capability  is  impossible  with¬ 
out  communications  capability. 
Communications  is  the  core  of 
what  we  need.” 

Because  85%  of  the  nation’s 
critical  infrastructure  is  con¬ 
trolled  by  the  private  sector, 
businesses  need  to  develop 
the  concept  of  a  “trusted  part¬ 
ner”  when  building  com- 


Our  servers  are 
considered  mu¬ 
nitions  by  the  federal 
government.  So  when 
we  wanted  to  provi¬ 
sion  servers  off  of  our 
computers  to  a  global 
population,  the  federal 
government . . .  said, 
‘We’d  like  to  know  all 
the  people  who  use  this/ 

JONATHAN  SCHWARTZ, 

PRESIDENT  AND  CHIEF  OPERATING 
OFFICER,  SUN  MICROSYSTEMS 

to  products  like  Sun  Grid, 
McNealy  said.  “It  may  take 
natural  disasters  or  a  real  fun¬ 
damental  crisis  to  break  their 
adhesions  to  their  traditional 
way  of  doing  things.” 

Officials  from  the  State  De¬ 
partment  did  not  respond  to 
calls  seeking  comment  for  this 
story.  » 


munications  that  can  survive 
disasters,  said  Tom  Lesica, 
senior  vice  president  of  global 
technology  and  operations  at 
Avaya.  Such  a  partner  would 
likely  carry  a  seal  of  approval 
from  a  third  party  to  ensure 
that  its  equipment  could  sur¬ 
vive  a  disaster,  he  said. 

None  of  the  panelists,  in¬ 
cluding  Massachusetts  Lt.  Gov. 
Kerry  Healey,  a  Republican, 
called  on  federal  or  state  gov¬ 
ernments  to  certify  trusted 
partners  or  legislate  such  co¬ 
operation. 

“I  suspect  companies  want 
to  do  this  on  their  own,”  Heal¬ 
ey  said.  “There  has  to  be  a  de¬ 
gree  of  civic-mindedness.  It’s 
not  just  the  profitability  factor.” 

Following  Katrina,  The 
American  Red  Cross  received 
help  from  several  call  center 
and  communications  provid¬ 
ers,  which  supplied  network 
capacity  and  personnel  to  keep 
networks  accessible  for  a  vari¬ 
ety  of  tasks,  said  Lesica. 

With  that  in  mind,  Avaya 
may  work  with  other  IT  ven¬ 
dors  at  a  CIO  summit  next 
month  to  devise  a  plan  under 
which  different  vendors  would 
commit  in  advance  to  offer  call 
center  capacity  in  an  emer¬ 
gency,  Lesica  said. » 


THE  SERVER  FOR  COMPANIES  WHOSE  I.T. 
DEPARTMENT  IS  LARRY. 


Small  I.  T.  department  facing  big  demands?  A  PC-based  network  can 
only  take  you  so  far  Enter  the  IBM  eServer™  xSerles ®  100  Express. 

It’s  more  robust.  More  available.  More  functional.’  Not  only  is  it 
designed  to  help  increase  productivity  and  lower  your  computing 
costs,  you  can  also  expand  your  capabilities  as  your  I.  T.  needs 
evolve2  Plus  it’s  easy  to  install,  thanks  to  IBM  ServerGuide™ 

What's  more,  you  can  keep  your  technology  current  while  helping  to 
reduce  costs  through  IBM  Global  Financing. 

The  xlOO  Express  comes  with  Inter  reliability  -  and  a  whole  lot 
more.  Why  not  put  it  to  work  for  you? 

IBM  eServer'"  xSeries  100  Express 


Affordable,  reliable,  easy  to  manage:  xSeries  servers  with  Intel®  Pentium®  Processors 


From  $709 


(Other  configurations  as  low  as  $599) 


Inter  Pentium®  4  Processor  and  Pentium  D  (dual  core)  Processors 
One-way  tower 

Up  to  500GB  of  storage  with  2  SATA  hard  disk  drives3 


ServerGuide:  for  easy  systems  setup  and  configuration 
ECC  error-correcting  memory  for  critical  server  data  protection 
Limited  warranty:  1  year  on-site4 


IBM  BladeCenter1  HS20  Express 

From  $1,839*  (Other  configurations  as  low  as  $1,669) 
IBM  Financing  Advantage  Only  $52/month6 


IBM  TotalStorage®  DS400  Express 

From  $8,495*  (Other  configurations  as  low  as  $4,995) 
IBM  Financing  Advantage  Only  $238/month6 


Up  to  two  Intel®  Xeon®  Processors  3.80GHz/2MB  IBM  Director  to  help  monitor  usage/performance5  3U  rack  mount  entry-levei  with  up  to  two  controllers  Starts  at  34GB/  scales  to  12TS 

Up  to  14  blades  per  chassis  Limited  warranty:  1  year  on-site4  2GB  Fibre  Channel  host  connectivity  Limited  warranty:  1  year  on-site4 

Supports  both  32-  and  64-bit  applications 


“Double  Your  Memory”  at  no  additional  cost.  Now  get  double  your  memory  at  no  extra  charge  when  you  purchase  select  IBM  eServer  xSeries 
and  BladeCenter  Express  systems  by  March  13,  2006/ 


ibm.com/systems/innovate20  1  866-872-3902  mention  104CE12A 


'All  prices  are  IBM's  estimated  retail  selling  prices  as  of  December  13, 2005.  Prices  may  vary  according  to  configuration  Resellers  set  their  own  prices,  so  reseller  prices  to  end  users  may  vary.  Products  are  subject  to  availability.  This  document  was  developed 
for  offerings  in  the  United  States,  IBM  may  not  offer  the  products,  features,  or  services  discussed  in  this  document  in  other  countries.  Prices  subject  to  change  without  notice.  Starting  price  may  not  include  a  hard  drive,  operating  system  or  other  features.  Contact 
your  IBM  representative  or  IBM  Business  Partner  for  the  most  current  pricing  in  your  geography.  1.  Comparison  assumes  applications  are  being  run  in  a  server  environment.  2.  May  require  an  additional  charge.  3.  Denotes  raw  storage  capacity.  Usable  capacity 
may  be  less.  4.  Telephone  support  may  be  subject  to  additional  charges.  For  on-site  labor,  IBM  will  attempt  to  diagnose  and  resolve  the  problem  remotely  before  sending  a  technician.  On-site  warranty  is  available  only  for  selected  components.  5.  IBM  Director  must 
be  installed.  Products  included  in  IBM  Express  Servers  and  Storage  may  also  be  purchased  separately.  6.  IBM  Global  Financing  offerings  are  provided  through  IBM  Credit  LLC  in  the  United  States  and  other  IBM  subsidiaries  and  divisions  worldwide  to  qualified 
commercial  and  government  customers.  Monthly  payments  provided  are  for  planning  purposes  only  and  may  vary  based  on  your  credit  and  other  factors.  Lease  offer  provided  is  based  on  a  FMV  lease  of  36  monthly  payments.  Other  restrictions  may  apply.  Rates  and 
offerings  are  subject  to  change,  extension  or  withdrawal  without  notice.  7.  Offer  subject  to  the  complete  terms  of  the  IBM  Double  Your  Memory  promotion  available  through  ibm.com.  IBM,  the  IBM  logo,  eServer,  xSeries,  BladeCenter,  ServerGuide  and  TotalStorage 
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Four  Health  Care  Workers 
Lose  Jobs  Over  Data  Theft 


Providence  Home 
Services  sets  new 
security  policies 
after  breach 


BY  TODD  R.  WEISS 

ROVIDENCE  HOME  Ser¬ 
vices  said  that  it  fired 
one  employee  and  that 
three  others  resigned 
in  connection  with  the  theft 
of  backup  computer  tapes  and 
disks  from  a  parked  car  in 
Portland,  Ore. 

The  tapes  and  disks  con¬ 
tained  personal  information 
and  medical  records  on  about 
365,000  hospice  and  home 
health  care  patients  of  the 
division  of  Seattle-based 
Providence  Health  System. 

In  a  statement,  the  parent 

We  have  heard 
from  patients  that 
the  process  to  notify 
the  credit  agencies  can 
be  difficult,  and  we  ap¬ 
preciate  the  time  they 
have  spent  as  a  result 
of  the  theft. 

RICK  CAGEN,  CEO,  PROVIDENCE 
HEALTH  SYSTEM'S  PORTLAND 
SERVICE  AREA 


firm  said  the  four  workers  left 
the  company  after  “a  confiden¬ 
tial  and  thorough  internal  re¬ 
view  process  of  the  data  storage 
procedures  that  led  to  the  theft.” 

A  Providence  Health  System 
spokesman  said  he  couldn’t 
confirm  the  titles  of  the  work¬ 
ers,  but  he  did  note  that  all  four 
had  jobs  related  to  the  data- 
theft  incident. 

Meanwhile,  the  health  care 
organization  said  it  has  signed 
an  agreement  with  security 
vendor  Kroll  Inc.  in  New  York 
to  provide  its  ID  TheftSmart 
credit  monitoring  and  restora¬ 
tion  services  for  free  to  those 
affected  by  the  theft. 

Providence  said  it  will  notify 
affected  patients  by  mail  this 
week  about  the  deal  and  will 
provide  instructions  for  sign¬ 
ing  up  for  the  program. 

ID  TheftSmart  allows 
individuals  to  continuously 
monitor  their  credit  files.  The 
service  investigates  potential 
identity  theft  cases  and  can 
help  victims  restore  their  iden¬ 
tities  if  a  data  theft  occurs. 

In  a  statement,  Rick  Cagen, 
CEO  of  Providence  Health  Sys¬ 
tem’s  Portland  Service  Area, 
said  the  company  turned  to 
Kroll  because  “we  have  heard 
from  patients  that  the  process 
to  notify  the  credit  agencies 


can  be  difficult,  and  we  appre¬ 
ciate  the  time  they  have  spent 
as  a  result  of  the  theft.” 

The  Oregon  attorney  gener¬ 
al’s  office  is  investigating  the 
data-theft  incident.  A  spokes¬ 
man  for  the  office  could  not  be 
reached  for  comment. 

The  incident  took  place  on 
Dec.  31  after  an  IT  worker  at 
Providence  Home  Services 


BY  HEATHER  HAVENSTEIN 

Sonic  Software  Corp.  last 
week  brought  out  a  new  ver¬ 
sion  of  its  Actional  service- 
oriented  architecture  (SOA) 
management  tool  that  it  said 
will  provide  business  users 
with  more  visibility  into  busi¬ 
ness  processes. 

The  Actional  6.0  software  is 
slated  to  ship  today. 

After  viewing  a  demon¬ 
stration  of  Actional  Version 
6.0,  Janet  Park,  director  of 
architecture  and  systems  inte¬ 
gration  at  Starwood  Hotels  & 
Resorts  Worldwide  Inc.,  said 
she  expects  that  it  can  help  the 
hotelier  automatically  define 
its  customized  business  proc¬ 
esses  and  generate  business 


took  backup  tapes  and  disks 
home  in  his  car  as  part  of  the 
division’s  backup  protocol.  The 
disks  and  tapes  were  stolen 
from  the  car  that  night. 

Providence  Home  Services 
has  since  discontinued  that 
backup  procedure  and  brought 
in  more  traditional  means  of 
protecting  data. 

Some  of  the  data  on  the 
tapes  was  password-protected 
at  the  application  level,  while 
the  rest  was  stored  in  pro¬ 
prietary  file  formats  without 
password  protection.  After  the 
incident,  the  company  added 
more  security  technologies, 


metrics  around  them. 

“By  using  Actional  [6.0],  we 
can  tie  the  business  service 
operations  aspect  with  more 
of  IT  infrastructure  manage¬ 
ment,”  she  said. 

Starwood  is  now  using  older 
versions  of  Actional’s  SOAP- 
station  Web  services  broker  and 
Looking  Glass  Web  services 
management  software  in  a  proj¬ 
ect  to  rewrite  its  reservation 
system  to  run  within  an  SOA. 

Park  said  she  expects  that 
the  new  version  will  also  al¬ 
low  Starwood  to  “obtain  the 
last  mile  of  security”  within 
its  SOA. 

Dan  Foody,  chief  technology 
officer  at  Sonic,  said  Actional 
6.0  can  help  companies  learn 


including  encryption. 

The  information  on  the 
disks  and  tapes  included 
names,  addresses,  dates  of 
birth,  physicians’  names,  in¬ 
surance  data,  diagnoses,  pre¬ 
scriptions  and  some  lab  results. 
Social  Security  numbers  were 
included  with  the  records  of 
about  250,000  of  the  patients, 
according  to  the  health  system. 
Some  of  the  records  also  in¬ 
cluded  patient  financial  infor¬ 
mation,  it  said. 

Providence  said  it  has  re¬ 
ceived  no  verified  reports  that 
the  stolen  data  has  been  used 
illegally.  * 


more  about  services  inter¬ 
actions  within  a  business 
context  and  includes  auto¬ 
mated  runtime  governance  to 
enforce  services  policies. 

The  new  version  also  adds 
the  ability  to  secure  end-to- 
end  process  flows  and  to  cre¬ 
ate  and  enforce  security  at  the 
process  level,  he  said. 

Foody  said  the  upgrades  can 
support  the  growing  number 
of  companies  where  “the  busi¬ 
ness  person  is  now  starting  to 
get  involved  in  SOA  initiatives.” 
Actional  6.0  can  also  ensure 
that  processes  comply  with 
emerging  regulations,  he  said. 

Sonic  acquired  the  Actional 
technology  when  its  parent 
company,  Progress  Software 
Corp.,  purchased  Actional 
Corp.  earlier  this  year. » 


Sonic  Updates  Actional  SOA  Manager 

Acquired  tool  to  offer  process  visibility 


Support  Identity  Manager  Tool 


IBM,  Novell  to 

Vendors  take  aim 
at  Microsoft’s 
planned  InfoCard 

BY  JEREMY  KIRK 

IBM  and  Novell  Inc.  last  week 
said  they  plan  to  support  an 
open-source  project  aimed  at 
giving  users  more  control  over 
how  information,  such  as  pass¬ 
words  and  financial  details,  is 
shared  across  Web  sites. 

The  two  companies,  along 
with  open-source  firm  Par¬ 
ity  Communications  Inc.  in 
Chestnut  Hill,  Mass.,  will 
contribute  code  to  the  effort, 


called  Project  Higgins.  The 
concept  was  developed  by 
Harvard  Law  School’s  Berk- 
man  Center  for  Internet  and 
Society. 

The  project  is  managed  by 
the  open-source  Eclipse  Foun¬ 
dation  in  Ottawa,  and  the  re¬ 
sulting  tool  will  support  Linux, 
Windows  and  other  operating 
systems,  said  IBM. 

IBM  said  Project  Higgins 
aims  to  allow  users  to  set 
rules  for  how  much  personal 
information  can  be  viewed  by 
businesses  such  as  insurance 
companies  or  banks. 

The  open-source  tool  will 


take  on  Microsoft  Corp.’s  Info- 
Card,  a  proprietary  secure 
identity  manager  that  is  slated 
to  ship  this  fall  with  the  next- 
generation  Windows  Vista 
operating  system.  InfoCard 
marks  the  second  Microsoft 
thrust  into  identity  manage¬ 
ment.  Its  earlier  tool,  called 
Passport,  was  not  widely  used. 

Vendor  Unity 

Proponents  of  Project  Hig¬ 
gins  maintain  that  creating  an 
identity  manager  requires  a 
multivendor  effort  because  of 
the  difficulty  of  creating  a  tool 
that  can  adhere  to  the  myriad 


regulatory  requirements  of 
different  governments. 

“We  don’t  believe  that  one 
single  company,  vendor  or  ex¬ 
pert  can  solve  this,”  said  Dan 
Bailey,  an  IT  safety  and  secu¬ 
rity  architect  at  IBM. 

Graham  Titterington,  an  an¬ 
alyst  at  Ovum  Ltd.,  a  London- 
based  research  firm,  said  even 
several  companies  joining 
forces  will  have  difficulty  re¬ 
solving  the  vast  procedural 
and  business  issues  involved 
with  creating  an  identity  man¬ 
agement  system. 

“My  impression  of  the  tone 
of  it  is  there  is  an  awful  lot  of 
bridges  you’ve  got  to  cross  and 
a  whole  lot  of  work  to  be  done,’ 


Titterington  said. 

Supporters  of  Project  Hig¬ 
gins  said  they  hope  that  cor¬ 
porate  Web  site  developers 
will  realize  that  a  structured 
identity  application  attracts 
users  and  will  therefore  make 
their  sites  compatible  with  the 
project’s  application  program¬ 
ming  interfaces. 

Bailey  said  the  Higgins 
code  should  be  released  by  the 
end  of  this  year,  and  IBM  will 
incorporate  the  code  into  its 
Tivoli  Access  Manager  and 
Tivoli  Identity  Manager  soft¬ 
ware.  * 


Kirk  is  a  reporter  for  the 
IDG  News  Service. 
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CTO  Says  Open-source  Ingres 
Database  Is  Ready  for  Business 


BY  ERIC  LAI 

Ingres  Corp.  was  spun  out  of  CA 
Inc.  late  last  year  to  develop  and 
sell  the  durable  database  tech¬ 
nology  that  was  released  to  the 
open-source  community  a  year 
earlier.  Dave  Dargo,  Ingres’  chief 
technology  officer,  talked  about 
the  status  of  the  new  company 
and  its  place  in  the  database 
community  last  week  in  an  in¬ 
terview  with  Computerworld. 

Has  the  momentum  of  open-source 
products  slowed  due  to  the  dual¬ 
licensing  model  implemented  by  the 

major  database  vendors?  I  really 
don’t  see  that  at  all.  Custom¬ 
ers  started  experimenting 
with  open-source  databases 
because  they  were  successful 
with  Linux  and  Apache  Web 
server.  And  they  recognized 
that  their  license  fees  weren’t 
driving  new  product  develop¬ 
ment.  They  desperately  want¬ 
ed  the  open-source  business 
model.  But  the  open-source 
databases  are  immature.  They 


haven’t  gone  through  a  30-year 
maturation  process  like  Oracle 
and  DB2. 

In  the  long  run,  you  may  see 
some  temporary  wins  [by  ven¬ 
dors  of  proprietary  databases 
distributing  free  editions]  for 
those  users  who  are  making 
pure  price  decisions.  But  I 
think  you’re  going  to  see  more 
people  driving  towards  [an] 
open-source  business  model, 
[which  makes]  it  more  efficient 
for  new  database  features  to 
be  delivered  to  the  market. 

For  the  leading-edge  cus¬ 
tomers  who  still  need  new 
features,  there  are  ways  to  get 
such  features  much  quicker 
than  paying  license  fees  to 
closed-source  vendors.  When 
you  want  a  change  in  a  closed- 
source  product,  you  have  to 
lobby  the  vendor  like  you 
would  lobby  Congress. 

Can  open-source  companies  keep 
up  with  the  much  larger  develop¬ 
ment  operations  of  proprietary 


database  vendors?  Some  Wall 
Street  companies  told  us  that 
they  have  lobbied  Oracle  for  10 
years  to  add  certain  new  fea¬ 
tures.  So  it’s  not  just  who  has 
the  capacity,  but  who  has  the 
willingness  to  do  it.  And  while 
Oracle  or  IBM  may  appear  to 
have  more  developers,  the  fact 
is  the  number  of  people  actu¬ 
ally  touching  the  kernel  is  very 
small,  usually  about  a  dozen 
or  so. 

As  a  veteran  of  the  database  wars, 
can  Ingres  generate  the  buzz  that 
surrounds  new  open-source  data¬ 
bases  like  MySQL?  I  think  that’s 
kind  of  naive.  It’s  not  the  way 
the  development  organiza¬ 
tions  or  CIOs  I’ve  worked  with 
make  decisions.  Developers 
make  decisions  based  on  what 
is  the  best  tool  for  a  specific 
task.  Standards  bodies  within 
organizations  then  make  their 
decisions  on  what  is  going  to 
be  the  easiest  to  deploy,  sup¬ 
port  and  maintain. 


MySQL’s  popularity  is  at  its 
level  because  it  is  the  easiest 
tool  [with  which]  to  deploy 
Web-based  applications,  and 
it  came  along  at  a  time  when 
Web  applications  exploded  in 
popularity.  It  wasn’t  the  “cool 
factor,”  it  was  because  MySQL 
was  easy  to  use.  When  you 
talk  to  an  enterprise  DBA,  they 
don’t  care  about  the  coolness 
or  how  fast  you  can  develop 
a  Web  app  with  it;  they  care 
about  stability,  about  whether 
they’re  going  to  have  to  come 
back  in  at  2  a.m.  to  recover  a 
corrupted  file. 

Has  Ingres  gained  any  new  custom¬ 
ers  since  spinning  off  from  CA  four 
months  ago?  The  deals  we  have 
closed  —  and  we  have  closed 
many  deals  —  have  all  been 
expansions  within  existing 
customers.  I  don’t  know  that 
we’ve  closed  any  brand-new 
customers.  We’ve  concentrat¬ 
ed  on  communicating  with  our 
existing  customers,  making 
sure  they’re  satisfied.  We  be¬ 
lieve  that  new  customers  will 
come  as  a  natural  course. 

Has  the  new  Ingres  formulated  a 
product  development  road  map? 


On  Feb.  7,  we  released  Ingres 
2006,  which  has  a  new  licens¬ 
ing,  packaging  and  pricing 
model.  We  will  also  have  a 
product  coming  out  in  the 
first  half  of  2007.  We’re  doing 
things  that  are  subtle  changes 
to  major  features  we  already 
have.  With  our  community 
edition  of  Ingres,  we  expect 
to  have  a  new  release  each 
month.  Then,  when  we  roll 
out  as  a  single  enterprise-class 
release  in  a  year,  people  know 
it’s  been  through  a  heavier 
testing  environment.  We’re 
also  working  with  partners  to 
create  an  Ingres-type  software 
appliance  that  makes  it  very 
easy  to  provide  support  for 
both  the  OS  and  database.  We 
haven’t  decided  yet  whether  to 
open-source  the  OpenROAD, 
Enterprise  Access  and  EDBC 
products. 

What  is  the  status  of  the  company’s 
search  for  a  permanent  CEO?  [In¬ 
terim  CEO]  Terry  [Garnett] 
is  still  looking.  He  wants  to 
make  sure  he  finds  the  right 
CEO.  As  Terry  watches  the 
team  jell  and  grow,  some  of 
his  search  criteria  may  have 
changed.  > 
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Buyer's  Laboratory  Inc.  performed  three  months  of 
rigorous  testing  of  the  leading  color  printers.  Ricoh's 
color  printer  line  proved  to  be  the  best  of  the  best. 

Let  Ricoh  dependability  move  your  ideas  forward, 
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DON  TENNANT 


MARTIN  GOETZ 


As  the  Timid  Turn 


I  HAVE  little  doubt  that  when  a  lot  of  people 
read  the  news  on  our  Web  site  last  week  that 
the  Canadian  company  Corel  and  the  Chinese 
company  Lenovo  had  inked  a  deal  to  ship 
Corel’s  WordPerfect  office  productivity  suite 
on  a  new  line  of  Lenovo  PCs,  they  could  barely  con¬ 
tain  their  disgust. 


“How  could  those 
Canadians  sell  out  to  the 
Chinese  that  way?  We  let 
them  have  WordPerfect, 
and  now  they’re  letting 
the  Chinese  get  their 
hands  on  it,”  they’ll  mutter. 

“Don’t  they  realize  that 
government  and  law  of¬ 
fices  all  over  America  use 
WordPerfect?  I  bet  this 
will  even  give  the  Chinese 
the  means  to  tamper  with 
the  source  code  and  ulti¬ 
mately  sabotage  our  legal 
system.” 

Pm  just  waiting  for  the  House  Com¬ 
mittee  on  International  Relations,  ig¬ 
norant  of  the  fact  that  Corel  is  based  in 
Ottawa,  to  try  calling  Corel  executives 
on  the  carpet  for  compromising  our 
national  security. 

Oddly  enough,  when  I  read  that 
news  on  our  Web  site  last  week,  I  could 
barely  contain  my  disgust,  either.  But 
not  because  I  was  hallucinating  about 
the  Red  Menace. 

For  as  long  as  I  care  to  remember, 

I’ve  listened  to  software  vendors,  Corel 
among  them,  whine  about  Microsoft’s 
anticompetitive  practices  and  its  mo¬ 
nopolistic  stranglehold  on  the  market¬ 
place.  All  they  wanted,  they  wailed, 
was  a  level  playing  field  where  they 
could  compete. 

So  what  bothered  me  about  the 
Corel/Lenovo  announcement  isn’t 
what  it  said,  but  what  it  didn’t  say.  This 
is  what  Corel  should  have  announced 
to  you: 

“As  part  of  its  strategic  plan  to  work 
with  Lenovo  and  other  hardware  ven¬ 
dors  to  offer  users  the  choices  they  de¬ 
serve,  Corel  is  announcing  full  support 
for  the  OASIS  OpenDocument  format 
as  a  standard  for  office  productivity 
applications.  In  doing  so,  Corel  is  ful¬ 
filling  its  long-standing  commitment  to 


DON  TENNANT  is  editor 
in  chief  of  Computerworld. 
Contact  him  at  don.tennant® 
computerworld.com. 


deliver  products  that  will 
free  users  from  the  fetters 
of  proprietary  file-saving 
formats.” 

Unfortunately,  Corel 
said  none  of  that,  and 
in  fact  has  meekly  sur¬ 
rendered  to  Microsoft  by 
all  but  abandoning  ODF. 
An  especially  unpleasant 
element  of  that  turnabout 
is  that  Corel  has  back¬ 
tracked  on  assurances  it 
gave  Massachusetts  that  it 
would  support  the  state’s 
controversial  effort  to  standardize  on 
ODF  —  a  standard  that  Corel  itself  was 
instrumental  in  formulating. 

Last  fall,  in  response  to  former  Mas¬ 
sachusetts  CIO  Peter  Quinn’s  request 
for  feedback  on  the  Enterprise  Techni¬ 
cal  Reference  Model,  which  identified 
ODF  as  the  state’s  standard  for  creating 
and  saving  official  records,  Richard 
Carriere,  Corel’s  general  manager  for 
office  productivity,  was  effusive  in  his 


support.  Here’s  an  excerpt  from  his 
response: 

“Corel  strongly  supports  the  broad 
adoption  of  the  open  standards  Massa¬ 
chusetts  has  outlined,  including  XML, 
the  OASIS  Open  Document  Format 
and  PDF _ Corel  is  an  original  mem¬ 

ber  of  the  OASIS  Technical  Committee 
on  the  Open  Document  Format,  and 
Paul  Langille,  a  senior  Corel  developer, 
is  among  the  original  four  authors  of 
the  ODF  specification.  Suffice  to  say, 
Corel  remains  committed  to  working 
alongside  OASIS  and  other  technology 
vendors  to  ensure  the  continued  evolu¬ 
tion  of  the  ODF  standard  and  the  adop¬ 
tion  of  open  standards  industrywide.” 

So  one  can  only  imagine  Quinn’s 
frustration  when  in  January  Corel 
released  WordPerfect  Office  X3,  the 
latest  version  of  the  office  productivity 
suite,  without  ODF  support.  And  that 
frustration  must  surely  be  shared  by 
Quinn’s  successor,  Louis  Gutierrez,  as 
Corel  executives  tap-dance  awkwardly 
around  the  question  and  distance 
themselves  from  ODF. 

Corel’s  lack  of  fortitude  to  stand 
alongside  IBM  and  Sun  in  the  quest  to 
popularize  ODF  as  a  viable  alternative 
to  Microsoft  is  disgusting.  The  going 
got  tough,  and  the  timid  turned  and 
ran.  ► 
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Patents: 
Where’s  the 
Invention? 

Hardly  a  week  goes 

by  without  the  con¬ 
troversial  issue  of 
software  patenting  hitting 

the  news.  Particularly  controversial 
are  the  business-method  software 
patent  filings  that  are  inundating  the 
U.S.  Patent  and  Trademark  Office. 
Patent  attorneys  are  characterizing 
obvious  and  normal  business  meth¬ 
ods  of  processing  information  as 
“machine  systems”  and  describing  the 
logic  for  automating  a  manual  or  semi¬ 
manual  business  method  as  an  inven¬ 
tion.  And  the  patent  office  continues 
to  accept  such  applications. 

Meanwhile,  the  U.S.  courts  are 
trying  to  cope  with,  as  well  as  clarify, 
the  plethora  of  software  patents  that 
are  in  litigation.  It’s  a 
real  mess  that  seems 
to  be  getting  worse. 

Although  nearly  40 
years  have  passed 
since  I  was  granted 
the  first  software 
patent,  the  nature  of 
software  is  still  being 
debated  around  the 
world. 

Many  organizations 
are  fighting  for  or 
against  the  patenting 
of  all  software,  while 
others  are  solely  for 
or  against  the  patent¬ 
ing  of  business  methods.  As  more  and 
more  business  methods  are  computer¬ 
ized,  it  is  clear  to  many  of  us  in  the 
computer  field  that  there  are  no  inven¬ 
tions  involved.  What  constitutes  an 
“invention”  is  key  to  this  discussion. 

The  patent  office  and  the  Supreme 
Court  have  never  indicated  that  a 
computer  program  is  the  subject  mat¬ 
ter  that  can  be  patented.  Patents  can 
be  granted  to  processes,  machines 
or  methods  when  they  rise  to  the 
definition  of  an  “invention”  in  pat¬ 
ent  law.  While  the  invention  may  be 
implemented  in  a  computer  program, 
it  is  not  the  program  that  is  patented. 
Computer  programs  themselves  are 
protected  from  unauthorized  copying 
only  by  copyright  law. 

An  invention,  in  lay  terms,  can  be  a 
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novel  device,  material  or  technique  that 
is  new,  inventive  and  useful.  It  has  been 
well  established  that  machines,  includ¬ 
ing  computer  hardware,  contain  patent- 
able  subject  matter.  As  for  software,  it 
is  well  recognized  that  whatever  can 
be  designed  in  hardware  circuitry  can 
be  developed  in  a  computer  program 
to  perform  the  same  functions.  The 
choice  is  a  purely  economic  one  that 
mainly  has  to  do  with  cost,  speed  and 
flexibility.  Patent  applications  normally 
show  the  preferred  implementation, 
and  the  patent  must  disclose  the  inven¬ 
tion  adequately  for  one  skilled  in  the  art. 
But  the  disclosure  could  be  in  the  form 
of  circuitry  for  a  hardware  implementa¬ 
tion,  a  flow  chart  for  a  software  imple¬ 
mentation  or  a  combination  of  both. 

In  1981,  the  Supreme  Court  ruled  in 
Diamond  v.  Diehr  that  processes  were 
patentable,  though  it  left  to  the  patent 


office  to  decide  whether  a  process  was 
“novel”  and  “nonobvious.”  The  court’s 
emphasis  was  on  whether  there  was 
an  invention,  not  on  how  the  invention 
was  implemented. 

The  patent  office  shortly  thereafter 
came  out  with  its  “PTO  Guidelines  on 
Computer  Inventions,”  stating  in  the 
opening  paragraph,  “The  U.S.  Supreme 
Court  decision  in  Diamond  v.  Diehr  sig¬ 
nificantly  affects  an  examiner’s  analysis 
under  35  U.S.C.  101  of  patent  applica¬ 
tions  involving  mathematical  equations, 
mathematical  algorithms  and  computer 
programs.”  Over  time,  however,  the 
patent  office  started  accepting  business- 
method  software  that  was  described 
as  a  machine  process  solely  on  the 
basis  that  there  was  no  prior  art  for  the 
business  method  described,  and  not  be¬ 
cause  there  was  an  invention  embedded 
in  that  machine  process. 


Since  then,  the  patent  office  has  is¬ 
sued  patents  on  business-method  soft¬ 
ware,  such  as  Amazon.com’s  “one  click” 
process,  with  little  regard  for  whether 
they  met  the  test  for  an  invention.  The 
surge  in  such  patents  arose  from  a  1998 
U.S.  appeals  court  decision  agreeing 
with  the  patent  office  that  State  Street 
Bank  had  a  valid  patent  on  a  method  of 
doing  business  for  pooling  the  assets  of 
mutual  funds.  Unfortunately,  that  case 
never  went  before  the  Supreme  Court, 
which  has  yet  to  decide  on  business- 
method  software  patents.  The  closest  it 
has  come  was  in  1975,  in  Dann  v.  John¬ 
son,  but  in  that  case,  it  made  a  narrow 
decision  in  rejecting  the  patent  claim, 
stating  that  the  patent  did  not  meet  the 
test  of  “unobviousness.” 

A  nonpartisan  government  com¬ 
mission,  similar  to  the  Commission 
on  New  Technological  Uses  of  Copy¬ 


righted  Works  in  the  1970s,  needs  to 
be  formed  to  provide  strong  recom¬ 
mendations  to  the  patent  office.  The 
commission  should  examine  what 
other  countries  have  done  regarding 
business  methods.  The  European  Pat¬ 
ent  Convention,  for  example,  has  ruled 
that  anything  that  consists  of  “schemes, 
rules  and  methods  for  performing 
mental  acts,  playing  games  or  doing 
business,  and  programs  for  comput¬ 
ers”  is  not  an  invention  and  therefore 
not  patentable.  That  would  not  only  be 
a  good  starting  point;  it  could  also  be 
the  basis  for  a  worldwide  agreement  on 
limiting  patentability  to  true  software- 
related  inventions.  * 
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Do  Only  White  Guys 
Have  Bad  Bosses? 

THE  ARTICLE  “Bad Boss: How 
to  Survive  the  Monster  Manager" 
[Jan.  23]  was  interesting,  but  it 
would  have  had  more  appeal  if  you 
had  thought  to  have  more  diversity 
in  the  group  of  bad  boss  victims 
you  highlighted.  I’ll  go  out  on  a  limb 
here  and  hazard  that  women  and 
minorities  might  have  different 
experiences  to  share  on  surviving  a 
bad  boss. 

Snowdy  Dodson 

Science  librarian,  CSUN  Library, 
Northridge,  Calif. 

The  Key  Is 
Professionalism 

IN  HIS  opinion  article  “Don't 
Outsource  Program  Management" 
[Jan.  16],  Bart  Perkins  outlines 
important  points  to  consider  when 
undertaking  large  programs.  Each 
point  needs  consideration  when 
determining  the  best  way  to  manage 
all  opportunities.  The  interesting 
aspect  is  that  he  advocates  out¬ 
sourcing  the  program  management 
to  a  third  party  over  the  primary 
outsourcing  group  when  in-house 
expertise  is  not  available.  Whether 
in-house  or  outsourced,  the  dedica¬ 
tion  and  loyalty  of  your  resources 
are  really  dependent  on  the  profes¬ 
sionalism  of  the  individual.  Even 
boutique  firms  can  fail  in  objectivity, 


accuracy  and  early  warning  signals. 
They  are  just  as  susceptible  to  the 
politics  and  fear  of  losing  work  as  in- 
house  or  outsourcing  organizations. 
The  key  to  successful  program  man¬ 
agement  is  to  find  the  best  fit  for 
your  core  competencies,  program 
specifics  and  company  culture. 
Thomas  Cutting,  PMP 
Keane  Inc.,  Cypress,  Calif. 


Line  Manager  Is  Vital 
To  Project  Success 

ONCE  AGAIN,  Computerworld 
has  hit  upon  a  significant 
aspect  of  project  management 
[“Not  So  Fast:  Rushing  Projects 
Hurts  R0I,"  Jan.  16],  Experience 
has  taught  me  that  the  best  way  to 
ensure  that  project  benefits  are  real¬ 
ized  is  to  involve  the  line  manager 
from  the  beginning  so  that  ROI  and 
cost-benefit  objectives  are  shared 
and  understood.  The  line  manager 
should  be  tasked  with  “collecting” 
the  benefits,  since  he  knows  more 
about  where  they  exist.  Of  course, 
the  project  manager  must  also  be 
involved  as  a  partner,  but  not  as  a 
collection  agency.  A  line  manager 
not  in  agreement  with  the  goals  and 
the  benefits  that  are  expected,  or 
one  who  is  kept  in  the  dark  about 
them,  can  accidently  or  otherwise 
derail  the  project  no  matter  how  well 
the  project  has  been  run.  Of  course, 
working  with  the  line  manager  also 
assures  that  there  will  be  reward  for 


him  as  well  as  the  project  manager. 
There  is  no  better  incentive. 
Norman  H.  Carter 
President  and  CEO, 
Development  Systems 
International,  Los  Angeles, 
dsicarte@sbcglobal.net 


THE  BEST  and  most  effective 
way  to  track  and  secure  benefits 
is  to  input  the  savings  directly  into 
departmental  budgets.  If  a  user 
justifies  a  system  based  on  a  head- 
count  reduction,  then  the  salary  for 
the  head  count  should  be  removed 
from  the  department’s  budget  based 
on  the  planned  implementation  date. 
The  budget  can  then  be  monitored 
and  adjusted  should  the  project 
implementation  schedule  change. 
When  this  practice  is  adopted, 
then  all  stakeholders  get  seriously 
involved  in  developing  meaningful 
ROI  projections  and  project  devel¬ 
opment  schedules. 

J.  Russell  Robinson 
Consultant,  Graybeard  Consulting, 
Los  Angeles  and  Houston, 
jrrobin@earthlink.net 


Life  in  Cube  Farms 
Isn’t  for  Everyone 

BOTH  SIDES  of  the  debate  are 
missing  the  key  point  [“Private 
Office  or  Cubicle:  The  Debate  Goes 
On,”  Jan.  9].  One  size  does  not  fit 
all.  Some  people  need  more  privacy 
to  work  effectively,  and  others 


need  more  interaction.  Personally,  I 
think  that  cubes  are  a  “worst  of  all 
worlds”  compromise  because  they 
don’t  really  provide  privacy  but  do 
reduce  interaction.  But  then  I’m  one 
of  those  who  is  more  effective  when 
it's  quiet.  I  also  acknowledge  that  I 
need  to  stick  my  head  out  and  see 
what  is  happening  regularly.  But 
not  when  I  have  a  system  down  and 
three  guys  are  having  a  loud  conver¬ 
sation  about  sports  next  door! 

Kai  Hintze 

Systems  analyst,  Salt  Lake  City, 
hintze@aros.net 


I’VE  EXPERIENCED  life  in  a 
cube  farm,  in  a  start-up  where 
we  did  shoulder-to-shoulder  de¬ 
velopment  on  makeshift  tables,  in 
a  high-walled  cube  (almost  an  of¬ 
fice),  in  an  open  space  (desks  with 
no  partitions),  in  a  shared  office 
and  now  back  to  a  cube  farm.  The 
greatest  personal  productivity  I’ve 
ever  achieved  was  working  from 
home,  and  second  most  was  in  my 
own  office.  The  least  productive 
environment  was  the  open  space.  I 
was  constantly  interrupted  (as  tech 
lead,  this  is  normal)  because  I  was 
instantly  accessible. 

If  you  have  a  large  project,  putting 
the  dev  team  in  one  room  is  good 
because  dependencies  can  be  re¬ 
solved  far  faster.  Respect  for  some¬ 
one  performing  a  deep  task  has  to 
be  drilled  into  the  team,  though,  and 
a  nonintrusive  method  of  asking  for 


help  needs  to  be  found  so  someone 
can  choose  to  jump  out  of  focus 
rather  than  being  pulled  from  it.  If 
you  are  doing  ongoing  project  sup¬ 
port  or  maintenance,  private  offices 
are  the  way  to  go. 

Christopher  Wanko 
System  architect, 

Kenilworth,  N.J. 


ONE  ASPECT  of  the  question 
wasn’t  addressed,  but  I  think  it’s 
critical.  Most  coders  I’ve  met  tend 
to  be  introverts,  and  introverts  are 
highly  likely  to  be  more  productive 
in  an  office,  where  they  can  feel 
a  sense  of  autonomy.  Putting  an 
introvert  in  an  open  cubicle  could 
just  as  easily  stifle  communication 
as  foster  it.  For  extroverts,  shouting 
a  question  over  a  cube  wall  is  no 
big  deal.  For  introverts,  this  may  be 
downright  unnerving. 

Ian  Smith 


COMPUTERWORLD  welcomes  com¬ 
ments  from  its  readers.  Letters  will 
be  edited  for  brevity  and  clarity.  They 
should  be  addressed  to  Jamie  Eckle, 
letters  editor.  Computerworld,  PO  Box  : 
9171, 1  Speen  Street,  Framingham, 

Mass.  01701.  Fax:  (508)  879-4843. 

E-mail:  letters@computerworld.com. 
Include  an  address  and  phone  num¬ 
ber  for  immediate  verification. 

OFor  more  letters  on  these 
and  other  topics,  go  to 

www.computerworld.com/fetters 
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INTELLIGENCE 


Better  answers,  faster. 
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Challenged  with  balancing  efforts  to  support  the  latest  strategic  initiatives  while  still  lowering  operational 
costs?  SAS  takes  you  beyond  traditional  B!  query  and  reporting  to  a  higher  level  of  shared  decision  making 
that  drives  innovation.  Our  fully  integrated  Enterprise  Intelligence  Platform  sets  the  foundation,  linking 
technologies  for  data  integration  and  storage,  reporting  and  analysis.  Proven  software,  industry-specific 
solutions  and  domain  experience  extend  the  value  of  your  investment.  Bridging  the  gap  between  what  you 
have  -  growing  expectations  to  deliver  a  return  on  investment  -  and  what  you  want  to  achieve  -  increased 
profits,  reduced  risk  and  improved  performance. 


Regardless  of  the  project  list  -  building  data  warehouses,  consolidating  multiple  databases,  cleansing 
data  in  real  time,  augmenting  operational  data  with  new  information,  or  even  dealing  with  ERP  systems 
-  SAS  helps  you  connect,  cleanse,  consolidate  and  create  value  from  all  your  enterprise  data.  Whether  your 
data  integration  needs  are  stand-alone,  or  you  need  to  seamlessly  integrate  with  our  scalable,  end-to-end 
business  and  analytic  platform. 
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SAS®  SOFTWARE  FOR  INTELLIGENCE  STORAGE 


SAS  Intelligence  Storage  ensures  that  business  and  analytic  intelligence  can  be  obtained  quickly,  by  serving 
the  data  through  a  platform  designed  for  rapid  retrieval  and  reporting  without  sacrificing  manageability  and 
operational  integrity.  And  our  integrated,  scalable  storage  architecture  grows  easily  with  your  organization, 


unlike  many  "one-size-fits-all”  platforms. 


SASe  SOFTWARE  FOR  BUSINESS  INTELLIGENCE 
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Our  integrated  suite  of  Bl  software  ensures  fast,  easy  access  to  multiple  data  sources,  consistent  and 
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credible  reporting,  and  simple  deployment  of  data  across  your  organization.  SAS  eliminates  the  need  to 

maintain  data,  security  and  metadata  in  several  places  and  formats  -  providing  reliable  results  that  can 

■  .  . 

be  shared  quickly  to  ensure  that  IT  inspires  business  innovation. 


analysis,  ranging  from  experimental  design, 
i  and  forecasting  to  simulation  and  optimization. 
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free  white  paper 
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Border  Patrol 

An  increasing  number  of  com¬ 
panies  are  using  network-based 
content  monitoring  tools  that  ana¬ 
lyze  traffic  for  sensitive  content  and 
block  it  from  moving  outside  of  the 
corporate  LAN.  PAGE  32 
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Supercomputers  Turn 
Toward  Productivity 


Job  Interview  Raises 
Plenty  of  Questions 


Supercomputing  has  become  dominated  by  clusters 
of  hundreds  of  commodity  processors,  like  IBM’s 
Blue  Gene  L.  But  some  users  are  beginning  to  push 
back.  Needed:  faster  data  flow.  PAGE  36 


C.J.  Kelly  thinks  about  changing 
jobs  but  finds  that  the  applicant  is 
sometimes  better  prepared  than  the 
company  she  would  join.  PAGE  38 


storage  switches  have  always  had  to 
provide  additional  functions  that  could 
be  classified  as  intelligent. 

Device  discovery,  for  example,  is  es¬ 
sential  for  storage  networking.  Servers 
are  initiators  of  storage  transactions, 
but  storage  arrays  are  passive  targets. 
For  servers  to  find  and  establish  con¬ 
nections  with  storage  arrays,  the  fabric 
switch  provides  fabric  log-on  services 
and  a  simple  name  server.  Once  storage 
devices  are  registered  with  the  fabric, 
servers  may  query  the  switch  to  dis¬ 
cover  potential  targets.  Likewise,  fabric 


FOR  many  years,  vendors 

have  been  promoting  intelli¬ 
gent  storage  switches,  particu¬ 
larly  for  virtualization  proj¬ 
ects.  Initial  implementations, 
however,  relied  mainly  on  appliances 
that  created  performance  bottlenecks 
and  were  application-specific  and  dif¬ 
ficult  to  scale.  As  a  result,  end  users  have 
been  slow  to  adopt  those  so-called 
smarter  solutions. 

“I  don’t  see  any  real  intelligence  yet,” 
says  Chris  M.  Christian,  senior  design 
lead  SAN  architect  at  Norfolk  Southern 


Intelligent  storage  switches  are  maturing 
but  it  may  be  another  year  or  two  before 
high-level  intelligence  is  available  at  the 
heart  of  the  SAN.  BY  DREW  ROBB 


Corp.,  a  freight  railway  company  in 
Norfork,  Va.  “Advanced  intelligence 
features  probably  won’t  arrive  till  at 
least  the  summer,  and  maybe  even 
later.” 

Though  the  products  may  not  be 
ready  quite  yet,  more  intelligence 
has  been  added,  and  a  lot  more  is  on 
the  immediate  horizon.  The  driver? 
The  frenzy  surrounding  information 
life-cycle  management  (ILM),  which 
requires  a  rapid  ramp-up  in  intelli¬ 
gence  in  order  to  move  data  around, 


regardless  of  the  disk  array,  platform 
or  servers.  As  a  result,  products  are 
now  coming  onto  the  market  that  offer 
additional  switch-based  services  and 
hold  the  promise  of  easing  the  storage 
management  burden. 

“Moving  storage  functionality  into 
the  switch  offers  the  potential  for 
long-overdue  management  relief  when 
compared  to  traditional,  host-based 


_ _  -  _ _ _  J 

techniques,”  says  Fred  Moore,  presi¬ 
dent  of  Horison  Information  Strategies, 
a  storage  consultancy  in  Boulder,  Colo. 
“Many  applications  are  ideal  for  this, 
including  virtualization,  volume  man¬ 
agement,  backup,  replication,  storage 
resource  management,  hierarchical 
storage  management  and  security.” 

Compared  with  traditional  data 
communications  switches  and  routers, 


zoning  and  the  mapping  and  masking 
of  logical  unit  numbers  are  intelligent 
functions  designed  to  ensure  that  only 
authorized  devices  are  allowed  to  com¬ 
municate  across  the  fabric. 

The  current  wave  of  intelligence, 
however,  generally  refers  to  higher-end 
switches  known  as  directors.  Today’s 
director-class  switches  contain  two 
types  of  intelligence:  transport  intelli¬ 
gence  and  application  intelligence. 

Transport  intelligence  provides  en¬ 
hancements  for  moving  data  through 


39  COMPUTERWORLD  March  6, 2006 


TECHN0L06Y 


www.computerworld.com 


DIRECTOR-CLASS 

INTELLIGENCE 

Director-class  switches  contain  two  types  of  intelligence: 

1  TRANSPORT  INTELLIGENCE  helps  move  data  through 
the  storage  fabric  while  optimizing  throughput.  These 
functions  have  been  improved  in  the  newest  directors, 
which  also  include  a  new  brand  of  transportation  smarts, 
such  as  the  ability  to  partition  resources. 

2  APPLICATION  INTELLIGENCE  provides  advanced 
storage  services,  such  as  storage  virtualization,  con¬ 
tinuous  data  protection,  and  backup  and  recovery.  This 
technology  has  not  as  yet  found  its  way  into  many  products, 
unlike  the  technology  underlying  transport  intelligence. 


the  storage  fabric  while  opti¬ 
mizing  throughput.  The  func¬ 
tions  mentioned  above  can  be 
classified  as  transport  intelli¬ 
gence.  Such  features  have  been 
strengthened  in  the  newest 
directors,  which  also  include 
a  new  brand  of  transportation 
smarts,  such  as  the  ability  to 
handle  virtualization  and  the 
partitioning  of  resources. 

Application  intelligence, 
on  the  other  hand,  provides 
higher-level  storage  services, 
such  as  storage  virtualization, 
continuous  data  protection, 
and  backup  and  recovery. 

There  are  only  a  few  exam¬ 
ples  of  application  intelligence, 
but  most  intelligent-switch 
vendors  are  really  promoting 
greater  transport  intelligence. 

For  example,  Broomfield, 
Colo.-based  McData  Corp. 
offers  the  Intrepid  10000  Di¬ 
rector  (ilOK).  Compared  with 
the  previous-generation  direc¬ 
tors,  the  ilOK  comes  with  ad¬ 
vanced  transport  intelligence 
intended  to  speed  up  traffic. 

Norfolk  Southern  is  intro¬ 
ducing  an  ilOK  into  its  envi¬ 
ronment.  The  current  storage- 
area  network  (SAN)  serves 
two  data  centers  that  represent 
500-plus  Unix  servers  (mainly 
AIX)  and  more  than  600  Win¬ 
dows-based  servers.  The  core 
of  the  SAN  is  built  around  four 
McData  6140  directors  (two  at 
each  site)  as  well  as  a  series  of 
smaller  McData  3232  switches 
at  the  edge  of  the  SAN.  It  is 
also  served  by  multiple  tiers  of 
data.  An  HDS  9980  array  from 
Hitachi  Data  Systems  Corp. 
serves  Tier  1,  an  EMC  Clariion 


CX700  from  EMC  Corp.  is  at 
Tier  2,  and  an  EMC  Centera  is 
used  for  disk-based  archiving. 

Christian  has  redesigned 
the  SAN  with  two  ilOKs  as  the 
backbone.  The  other  storage 
assets  run  through  the  McData 
director.  Like  many  corporate 
users,  though,  the  railroad  re¬ 
mains  cautious  about  adopting 
untried  intelligence  features. 

“I’m  buying  the  McData 
ilOK  to  get  I/O  from  here  to 
here  quickly,  not  for  replica¬ 
tion,  backup  or  anything  else,” 
says  Christian.  “But  it  does 
take  a  lot  of  intelligence  to 
move  I/O  efficiently  in  a  SAN.” 

Packing  the  Trunk 

In  addition  to  boosting  line 
speed,  the  latest  brand  of  trans¬ 
portation  intelligence  includes 
trunking  and  path-selection 
features.  For  example,  San 
Jose-based  Brocade  Communi¬ 
cation  Systems  Inc.  has  made 
its  Inter-Switch  Link  (ISL) 
Trunking  software  available 
as  an  optional  add-on  to  its 
4Gbit/sec.  SilkWorm  direc¬ 
tors.  ISLs  that  connect  one 
switch  to  another  can  be  com¬ 
bined  to  multiply  the  through¬ 
put  —  i.e.,  four  2Gbit/sec.  links 
become  an  8Gbit/sec.  line. 

The  San  Diego  Supercom¬ 
puter  Center  (SDSC)  at  the 
University  of  California,  San 
Diego,  has  deployed  a  Brocade 
SilkWorm  48000  director  and 
plans  to  use  this  to  implement 
trunking. 

“With  a  4Gbit/sec.  switch, 
you  can  trunk  together  eight 
ports  to  get  up  to  32Gbit/sec.,” 
says  Bryan  Banister,  manager 


of  storage  systems  and  pro¬ 
duction  servers  at  SDSC.  “But 
we’ll  need  to  add  extra  48000s 
to  achieve  this.” 

In  the  meantime,  he  has 
found  a  performance  benefit  of 
about  lGbit/sec.  using  another 
intelligent  transportation  en¬ 
hancement  built  into  the  di¬ 
rector.  The  technology,  known 
as  Dynamic  Path  Selection,  au¬ 
tomatically  routes  data  to  the 
most  efficient  path  available. 
This  feature  can  also  reduce 
the  number  of  ISLs  needed. 

Other  switch  vendors  are 
releasing  similar  products. 
McData  switches,  for  instance, 
contain  trunking  technology, 
and  Norfolk  Southern  has 
taken  advantage  of  that  feature 
to  tie  four  of  its  2Gbit/sec. 
McData  3232  switches  into 
an  8Gbit/sec.  trunk. 

Still  another  largely  trans¬ 
portation-based  intelligence 
feature  is  known  by  a  variety 
of  terms,  including  virtual 
SAN  (VSAN),  dynamic  parti¬ 
tioning  or  SAN  routing.  The 
idea  is  to  split  one  SAN  up 
into  multiple  discrete  sections 
or  tie  several  SANs  into  one 
central  switch.  This  solves 
problems  such  as  having  low 
utilization  on  one  tape  system 
and  overutilization  on  another. 

With  a  VSAN,  one  switch 
—  such  as  a  McData  ilOK  — 
can  be  partitioned  into  logical 
segments,  and  utilization  rates 
can  be  optimized.  Similarly, 
one  part  of  the  SAN  can  be 
earmarked  to  run  at  4Gbit/sec. 
for  backup  while  the  rest  runs 
at  2Gbit/sec.  Management  is 
also  simplified,  and  access 
rights  can  be  set  for  each  par¬ 
tition. 

“VSANs  allow  different 
fabrics  to  exist  on  the  same 
switch,  and  each  is  unaware  of 
the  existence  of  other  fabrics,” 
says  Moore. 

Vendors  are  exporting  this 
technology  with  switches  that 
extend  their  traditional  Fibre 
Channel-only  range  to  other 
protocols,  such  as  Fibre  Chan¬ 
nel  over  IP,  Internet  SCSI  and 
Fiber  Connectivity. 

Cisco  Systems  Inc.’s  MDS 
Multilayer  Data  Center  SAN 
Switch  is  one  example.  Others 
include  Hewlett-Packard  Co.’s 
HP  StorageWorks  Multi-Pro¬ 
tocol  Router  and  the  Brocade 


Multiprotocol  Router  (MPR). 

America  Online  Inc.  uses 
the  Brocade  MPR  primarily 
for  data  migration  and  re¬ 
source  sharing  across  three 
SANs  —  one  for  each  data 
center  in  Northern  Virginia. 
Two  MPRs  are  stationed  in 
each  SAN,  with  a  total  of 
2.5  petabytes  stored. 

Dan  Pollack,  operations 
architect  at  Dulles,  Va.-based 
AOL,  explains  that  when  he 
used  to  migrate  data  from 
one  site  to  another,  it  involved 
a  lot  of  physical  cabling,  re¬ 
connecting  and  reconfiguring 
to  establish  dedicated  lines 
for  migration.  Now  he  doesn’t 
have  to  combine  the  fabrics 
to  transfer  data. 

“We  can  provision  in  less 
than  a  day  now  versus  a 
couple  of  weeks  to  physically 
set  everything  up  before,” 
says  Pollack.  “The  built-in 
data-migration  engines  and 
data-processing  engines  of 
the  Multiprotocol  Router  add 
more  intelligence  than  the 
typical  switch,  as  they  allow 
us  to  move  data  around  more 
effectively.” 

Pollack  offers  a  virtual  tape 
library  (VTL)  as  an  example. 
Instead  of  having  to  deploy 
one  VTL  per  disk  array  or 
SAN,  AOL  can  now  share 
a  VTL  across  arrays  at  all 
three  sites.  This  has  helped 


eliminate  backup  bottlenecks 
on  large  servers  by  moving 
traffic  from  Ethernet  to  Fibre 
Channel. 

Application  Intelligence 

Much  of  the  excitement 
around  intelligent  switches 
to  date  has  centered  on  trans¬ 
portation.  That’s  changing, 
though,  as  the  demands  of 
ILM  force  the  integration  of 
more  application-rich  fea¬ 
tures.  The  creation  of  multiple 
classes  of  data  delivery  and 
multiple  zones  of  virtualized 
storage,  for  example,  lets  users 
deploy  the  SAN  in  alignment 
with  business  needs  without 
having  to  add  more  hardware 
or  software  elements. 

Take  the  case  of  storage 
security.  Software-based  en¬ 
cryption  can  exact  a  perfor¬ 
mance  penalty,  but  deploying 
encryption  appliances  across 
a  SAN  doesn’t  always  scale 
well  and  can  be  expensive.  An 
intelligent  switching  platform, 
on  the  other  hand,  can  add  en¬ 
cryption  across  a  SAN  without 
encountering  problems  with 
scaling,  and  it  can  keep  costs 
from  escalating. 

Another  example  is  storage 
virtualization  integration. 
Early  attempts  at  virtualiza¬ 
tion  largely  entailed  external 
appliances.  New  gear,  how¬ 
ever,  is  adding  virtualization 


DEPENDING  ON  which  vendor 
you  speak  to,  you'll  hear  a  dif¬ 
ferent  opinion  on  where  storage 
intelligence  and  virtualization 
should  really  be  placed.  McData 
and  Brocade,  being  switch  ven¬ 
dors,  claim  that  the  switch  is  the 
most  logical  place.  HDS,  with  its 
focus  on  disk  arrays,  insists  that 
intelligence  must  reside  in  the 
storage  controller.  And  Cisco, 
the  king  of  networking,  suggests 
-  surprise,  surprise  -  that  the 
network  should  contain  all  stor¬ 
age  virtualization. 

Such  a  divergence  of  opinion 
may  well  be  a  factor  in  the  slow 
corporate  adoption  of  storage 
intelligence.  According  to  a 


■ 

study  of  269  enterprises  by 
Framingham,  Mass.-based  IDC, 
only  8%  are  doing  any  virtual¬ 
ization  at  all,  while  23%  plan  to 
implement  some  in  the  next  12 
months.  If  you  focus  solely  on 
companies  with  10,000  or  more 
employees,  however,  usage 
rises  to  19%,  with  another  31% 
saying  they  plan  to  add  a  virtual 
component  within  a  year. 

“It's  very  hard  to  compare 
storage  virtualization  technolo¬ 
gies,  as  they  are  mostly  theories 
at  this  point,"  says  Rick  Villars,  a 
storage  analyst  at  IDC.  “We  will 
need  time  to  see  how  well  they 
ploy  in  the  real  world.” 

-DREW  ROBB 
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into  the  switch  itself. 

Work  on  intelligent  switch¬ 
ing  was  initially  spurred  on  by 
a  group  of  start-ups,  but  most 
of  those  vendors  have  been 
swallowed  up  by  the  big  boys. 
The  only  one  left  standing  is 
Maxxan  Systems  Inc.  The  San 
Jose-based  company’s  Maxxan 
MXV500  can  be  used  either 
as  a  SAN  switch  that  supports 
storage  applications  or  as  an 
application  platform  that  sup¬ 
ports  storage  security,  virtu¬ 
alization,  snapshots  and  data 
replication. 

McData,  too,  is  getting  in 
on  the  act.  The  company  has 
announced  some  basic  intel¬ 
ligence  in  its  Application  Ser¬ 
vices  Modules  (ASM),  which 
are  port-attached  to  the  ilOK 
and  are  compatible  with  previ¬ 
ous  McData  6000  series  direc¬ 
tors.  The  McData  ASM  is  a  24- 
port,  1U  (1.75-in.-high)  module 
that  attaches  to  any  port  of  a 
McData  director  or  switch.  It 
delivers  throughput  of  up  to 
1  million  I/O  operations  per 
second.  Current  modules  sup¬ 
port  virtualization  of  continu¬ 
ous  data  protection,  VTLs, 
replication  and  data  mobility. 
As  at  AOL,  the  idea  is  to  ac¬ 
complish  far  more  without 
having  to  rip  out  cables  and 
rearchitect  the  SAN. 

Dreams  Do  Come  True 

According  to  Christian  at  Nor¬ 
folk  Southern,  however,  true 
SAN  virtualization  remains  a 
dream.  But  progress  is  being 
made:  A  team  of  storage  ven¬ 
dors  is  working  with  McData 
and  others  to  add  a  hetero¬ 
geneous  virtualization  layer 
—  a  major  missing  piece  of  the 
intelligent  switching  puzzle. 
Within  a  few  months,  ASMs 
attached  to  an  ilOK  will  be  able 
to  take  advantage  of  this  vir¬ 
tualization  layer  to  perform  a 
wide  array  of  new  services. 

“I  will  no  longer  need  one 
kind  of  multipathing  software 
for  my  HDS  box  and  another 
kind  for  my  EMC  array,”  says 
Christian.  “I’ll  only  need  one 
brand  of  multipathing  soft¬ 
ware  that  will  be  able  to  func¬ 
tion  across  several  different 
arrays.” 

While  vendors  want  to  hur¬ 
ry  the  world  onto  their  new  in¬ 
telligent  gear,  the  bottom  line 


is  that  the  Really  Intelligent 
Switch  still  lies  in  the  future. 

“Intelligence  has  been  just 
over  the  horizon  for  quite 
some  time  and  has  yet  to 
make  a  big  splash,”  says  Mike 
Karp,  an  analyst  at  Enterprise 


Management  Associates  in 
Boulder,  Colo.  “There  will  also 
be  a  delay  in  market  uptake, 
since  these  things  are  serious 
investments.” 

AOL’s  Pollack  doesn’t  plan 
to  get  into  virtualization  and 


other  application  intelligence 
functions  until  he  has  gained 
more  confidence  on  the  trans¬ 
portation  side. 

Norfolk  Southern,  on  the 
other  hand,  doesn’t  even  plan 
to  deploy  SAN  routing  until 


the  end  of  the  year.  Says  Chris¬ 
tian,  “That  gives  us  another 
year  for  the  technology  to 
mature.” » 


Robb  is  a  freelance  writer  in 
Los  Angeles. 
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Network-based  monitoring  systems  detect  and  block  outbound 
traffic  containing  sensitive  data.  By  Robert  L.  Mitchell 


IT’S  NOT  what’s  coming  into  the 
corporate  network  that  concerns 
Gene  Fredriksen.  It’s  what’s  going 
out.  For  the  chief  security  of¬ 
ficer  at  securities  brokerage  Raymond 
James  Financial  Inc.  in  St.  Petersburg, 
Fla.,  leakage  of  sensitive  customer  data 
or  proprietary  information  is  the  new 
priority. 

The  problem  isn’t  just  content  within 
e-mail  messages,  but  the  explosion 
of  alternative  communication  mecha¬ 
nisms  that  employees  are  using,  includ¬ 
ing  instant  messaging,  blogs,  FTP  trans¬ 


fers,  Web  mail  and  message  boards.  It’s 
not  enough  to  simply  monitor  e-mail, 
Fredriksen  says. 

“We  have  to  evolve  and  change  at  the 
same  pace  as  the  business,”  he  explains. 
“Things  are  coming  much  faster.” 

So  Fredriksen  is  rolling  out  a  network- 
based  outbound  content  monitoring  and 
control  system.  The  software,  from  San 
Francisco-based  Vontu  Inc.,  sits  on  the 
network  and  monitors  traffic  in  much 
the  same  way  that  a  network-based 
intrusion-detection  system  would.  But 
rather  than  focusing  on  inbound  traffic, 


Vontu  monitors  the  network  activ¬ 
ity  originating  from  Raymond  James’ 
16,000  users.  It  examines  the  contents 
of  each  network  packet  in  real  time  and 
issues  alerts  when  policy  violations  are 
found.  Fredriksen  could  also  configure 
it  to  block  that  traffic,  but  he  doesn’t 
plan  to  use  that  feature  right  away. 

Unlike  security  tools  that  protect 
specific  applications  such  as  e-mail 
or  instant  messaging,  network-based 
content  monitoring  and  control  tools 
take  a  broad-brush  approach,  examin¬ 
ing  all  traffic  that  crosses  the  network. 


Tools  such  as  e-mail  filters  address 
part  of  the  content  security  puzzle  but 
only  recently  have  begun  to  focus  on 
outbound  content.  In  contrast,  network- 
based  products  offer  more  sophisti¬ 
cated  linguistic  analysis  techniques  to 
identify  and  block  the  transmission  of 
protected  content. 

Network-based  systems  do  more 
than  just  rule-based  scanning  for  Social 
Security  numbers  and  other  easily  iden¬ 
tifiable  content.  They  typically  analyze 
sensitive  documents  and  content  types 
and  generate  a  unique  “fingerprint”  for 
each.  Administrators  then  establish 
policies  relating  to  that  content,  and 
the  system  uses  linguistic  analysis  to 
identify  sensitive  data  and  enforce  those 
policies  as  information  moves  across 
the  corporate  LAN.  The  systems  can 
detect  both  complete  documents  and 
“derivative  documents,”  such  as  an  IM 
exchange  in  which  a  user  has  pasted  a 
document  fragment. 

Most  tools  offer  preset  compliance 
modules  that  can  detect  specific  types 
of  sensitive  data  out  of  the  box.  These 
cover  areas  ranging  from  sexual  harass¬ 
ment  and  privacy  concerns  to  compli¬ 
ance  with  federal  regulations.  The  tools 
are  designed  to  be  used  by  nontechni¬ 
cal  staff,  such  as  the  legal,  governance 
or  human  resources  departments.  But 
there  is  one  hitch:  They  can’t  identify 
encrypted  content.  Organizations  need 
to  review  business  processes  where 
encryption  is  used  and  develop  policies 
that  permit  the  movement  of  encrypted 
files  within  specific  contexts. 

Broader  Trend 

These  network-based  compliance 
products,  which  IDC  analyst  Brian 
Burke  calls  multiprotocol  content¬ 
filtering  tools,  are  part  of  a  broader  cat¬ 
egory  of  outbound  content  compliance 
products  that  includes  e-mail  filters, 
secure  e-mail,  instant  messaging  secu¬ 
rity  and  enterprise  rights  management 
tools.  While  IDC  expects  the  overall 
market  to  grow  to  $1.9  billion  by  2009, 
the  fastest-growing  segment  will  be 
multiprotocol  content  filtering,  with  a 
compound  annual  growth  rate  of  70% 
over  the  next  four  years,  Burke  says. 

That  growth  is  being  driven  by  pri¬ 
vacy  concerns  and  the  need  to  comply 
with  regulations  such  as  the  Sarbanes- 
Oxley  Act  and  the  Health  Insurance 
Portability  and  Accountability  Act.  En¬ 
forcement  by  regulatory  agencies  is  on 
the  rise,  says  Trent  Henry,  an  analyst  at 
Burton  Group  in  Midvale,  Utah. 

While  network-based  content  moni¬ 
toring  tools  have  been  around  for  sev¬ 
eral  years,  until  recently  most  vendors 
Continued  on  page  34 
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Learn  How  to  Achieve 
Storage  Networking  Success 

•  Get  a  Contemporary  Overview  of  Today’s  Storage  Networking 
Issues  and  Opportunities 

•  See  How  to  Implement  and  Deploy  the  Latest  in  Storage 
Networking  Technologies 

•  Hear  the  Latest  in  Enterprise  Security 

•  Learn  from  Best  Practices  and  Case  Studies 

Why  You  Should  Attend 

Are  you  responsible  for  managing  your  company’s  data  center  assets? 

Want  to  exchange  innovative  ideas  and  strategies  with  other  executives 
who  share  the  same  objectives?  Then  attend  Storage  Networking  World, 
where  you’ll  network  with  and  learn  from  renowned  experts  and  the 
nation’s  top  user  executives. 
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Tour  SNW’s  Solutions  Center 

No  other  storage  event  gives  you: 

•SNIA  member  companies  collaborating  on  integrated 
technology  and  business  application  solutions. 

New  in  April:  “Technology  Showcase” 

•The  opportunity  to  meet  leading  experts  and  engineers 
•Featuring  “Hands  On  Lab”  Program 


Y)C  Attend  I  DCs  Special  Storage  Analyst  Briefing 

In  this  fast-paced  session,  I  DC’s  top  storage  analysts  will 
examine  companies’  growing  interest  in  deploying  tiered 
storage  solutions  and  assess  its  impact  on  storage 
components,  systems,  networks,  management  and  services. 


For  information  or  to  register  now,  visit  www.snwusa.com/cw  or  call  1  -800-883-9090 


For  information  or  to  register  now,  visit  www.snwusa.com/cw  or  call  1-800-883-9090 


Conference  At-a-Glance  ( subject  to  change) 

For  details  and  updates,  visit  www.snwusa.com/cw 


MONDAY,  APRIL  3 


Registration  Open  8:00am  -  7:30pm 


9:30am  -  1  1 :55am 
1  1 :55am  -  1 :00pm 
1 2:00pm  -  5:00pm 
1 :00pm  -  5:25pm 
1 :00pm  -  5:25pm 
4:40pm  -  6:1 5pm 
5:00pm  -  7:00pm 
7:00pm  -  9:00pm 


Concurrent  Sessions  (Primer,  Career  Development,  SNIA  Tutorials,  etc.) 
Luncheon 

Pre-Conference  Golf  Outing 
I  DC  Analyst  Briefing 

Concurrent  Sessions  (SNIA  Tutorials,  End-User  Case  Studies,  etc.) 

End  User  Town  Hall  Meeting 

Speed  Dating  with  IDC:  A  Channel  Partner  Networking  Event  at  SNW 
Welcome  Reception 


TUESDAY,  APRIL  4 


Registration  Open  7:00am  -  7:00pm 


7:00am  -  8:00am 
8:00am  -  1 2:30pm 
1 2:45pm  -  2:00pm 
2:1  Opm  -  5:40pm 
5:40pm  -  8:40pm 


Breakfast 

General  Conference  Sessions 
Luncheon 

Concurrent  Sessions  (SNIA  Tutorials,  End-User  Case  Studies,  etc.) 
Expo  with  Dinner  and  Solutions  Center 


WEDNESDAY,  APRIL  5 


Registration  Open  7:00am  -  6:30pm 


7:1 5am  -  8:1 5am 
8:1 5am  -  1 2:1 5pm 
1 2:1 5pm  -  2:00pm 
1 2:1 5pm  -  7:1 5pm 
2:1  Opm  -  5:40pm 
4:00pm  -  7:00pm 
7:00pm  -  9:30pm 
9:30pm  -  1  1 :00pm 


Breakfast 

General  Conference  Sessions 
Expo  with  Luncheon 
Solutions  Center  Open 

Concurrent  Sessions  (SNIA  Tutorials,  End-User  Case  Studies,  etc.) 
Expo  and  Solutions  Center  Open 
Gala  Evening  with  Dinner  and  Entertainment 
Post-Gala  Reception 


THURSDAY,  APRIL  6 


Registration  Open  7:30am  -  10:00am 


7:30am  -  8:30am 
8:30am  -  1 2:00pm 
1 2:00pm 


Breakfast 

Concurrent  Sessions  (SNIA  Tutorials,  End-User  Case  Studies,  etc.) 
Conference  Concludes 


‘...a  high  quality,  low  fluff 
conference. .." 

Jay  Brummett 
Chief  Technology  Officer, 
Information  Technology, 
CIO  of  Ogden,  Utah 


SNIA 

Attend  SNIA-Certified 
Training  Programs  at  SNW 


The  Steele  Canyon 
Golf  Club 

Jamul,  California 


Pre-Conference  Golf  Outing 

Complimentary  for  Registered  IT  End-Users 

The  Pre-Conference  Golf  Outing  at  The  Steele  Sponsored  by: 

Canyon  Golf  Club,  is  complimentary  for  registered  Quantum 
IT  End-Users  (other  participants,  including  sponsors 
and  vendors,  may  play  on  an  “as  available”  basis  and  are 
responsible  for  all  applicable  golf  outing  expenses). 

For  details  contact  Duncan  Newell  at  1-508-271-8029 


Manchester  Grand  Hyatt 

San  Diego,  California 


Hotel  Reservations  and  Travel  Services 


Global  Odysseys  is  the  official  travel  company 
for  Storage  Networking  World.  They  are  your 
one-stop  shop  for  exclusive  discounted  rates  on 
hotel  accommodations. 


Global  Odyiweyn 


To  reserve  your  accommodations,  visit:  www.etcentral.com 


You  can  also  call  our  conference  housing  line  at:  1-888-254-1597 
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San  Diego,  California 


Application  for  Conference  Registration 

Fax  this  completed  application  to  1-508-820-8254  or  apply  online  at  www.snwusa.com/cw 


Your  business  card  is 
REQUIRED 

to  process  your  application 

Please  affix  your  business  card  to  this  space  prior  to 
submitting  your  application.  Applications  submitted 
without  business  cards  will  not  be  processed. 

Questions?  Call  1-800-883-9090 


If  not  indicated  on  your  business  card, 
please  provide  the  following  required 
information: 


Corporate  Email  Address 


Corporate  Website 

Registration  questions? 

Call  1  -800-883-9090  or  email 
snwreg@computerworld.com 

Need  accommodations? 

Reserve  them  at:  www.etcentral.com 

Or  call  1-888-254-1597 
or  email:  eventhousing@globalodysseys.com 


Please  check  ONE  of  the  following: 

Earlybird  Registration  (through  February  20,  2006) 

Full/Onsite  Registration  (after  February  20,  2006) 

□  1  am  an  IT  End-User* 

(Complete  Attendee  Profile  below) 

□  $1,290  General  Conference  Package 

(includes  General  Conference,  plus  Technical  and  Business  Tracks, 

SNIA-produced  Tutorials,  SNIA-Certification  “Test-Ready"  Courses) 

□  $1,690  General  Conference  Package 

(includes  General  Conference,  plus  Technical  and  Business  Tracks, 

SNIA-produced  Tutorials,  SNIA-Certification  “Test-Ready"  Courses) 

*  IT  End-Users  are  defined  as  those  who  are  attending  Storage  Networking  World  with  an  intent  (and  an  IT  spending  budget)  to  potentially  buy/lease  hardware/software/services,  etc.  from  our  conference  sponsors  and 
are  not  themselves  an  IT  vendor.  As  such,  account  representatives,  business  development  personnel,  analysts,  consultants  and  anyone  else  attending  who  does  not  have  IT  purchasing  influence  within  their  organization 
are  excluded  from  the  “IT  End-User"  designation.  Interpretation  and  enforcement  of  this  policy  are  at  the  sole  discretion  of  Computerworld. 


Attendee  Profile:  This  section  MUST  be  completed  by  IT  End-Users  and  Channel  Partners/Integrators/Consultants  only  (optional  for  all  other  registrations)  in  order  to  process  your  application. 


Your  Business/Industry 

□  Non-Tech:  Advertising/Marketing/PR/Media  (Publishing, 
Broadcast,  Online) 

□  Non-Tech:  Agriculture/Forestry/Fisheries 

□  Non-Tech:  Education 

□  Non-Tech:  Finance/Banking/Accounting 

□  Non-Tech:  Government  -  Federal  (including  Military) 

□  Non-Tech:  Healthcare/Medical/Pharmaceutical/Bio-Tech 

□  Non-Tech:  Insurance/Real  Estate/Legal 

□  Non-Tech:  Manufacturing  &  Process  Industries 

□  Non-Tech:  Mining/Oil/Gas 

□  Non-Tech:  Retailer/Wholesaler/Distributor 

□  Non-Tech:  Transportation/Utilities  (Energy,  Water,  etc.) 

□  Non-Tech:  Travel/Hospitality/Entertainment/Recreation 

□  Non -Tech:  Other _ 

□  Tech:  Communication  Carriers 
(ISP,  Telecom,  Data  Comm  Cable) 

□  Tech:  Manufacturing  -  Hardware/Software 

□  Tech:  Service  Provider  (MSP,  BSP,  ASP,  ESP,  Web  Hosting) 

□  Tech:  Other _ 


Your  Job  Title/Function: 

□  IT  Management:  CIO,  CTO,  CSO 

□  IT  Management:  Director 

□  IT  Management:  Manager 

□  IT  Management:  Technical  Consultant 

□  IT  Management:  VP 

□  Business  Management:  CEO,  COO,  Chairman,  President 

□  Business  Management:  Other  Corporate,  Business 
Manager 

□  Other:  Non-Manager 

What  is  the  one  item  that  best  describes  your 
involvement  in  the  IT  purchase  process? 

□  Authorize/Approve  Purchase 

□  Set  Budget  for  Expenditures 

□  Evaluate/Recommend  Products,  Brands 

□  Determine  Need  to  Purchase 

□  All  of  the  above 

□  None  of  the  above 


Number  of  employees  in  your  entire  organization 
(ALL  locations) 

□  Over  20,000 

□  10,000-  19,999 

□  5,000  -  9,999 

□  1,000-4,999 

□  500  -  999 

□  100-499 

□  50  -  99 

□  Less  than  50 

What  is  your  organization's  annual  IT/IS  budget 
for  all  IT/IS  products? 

□  $1  Billion  or  more 

□  $500  to  $999.9  Million 

□  $100  to  $499.9  Million 

□  $50  to  $99.9  Million 

□  $10  to  $49.9  Million 

□  $1  to  $9.9  Million 

□  $500,000  to  $999,999 

□  $250,000  to  $499,999 

□  $100,000  to  $249,999 

□  Under  $100,000 

□  None 


What  is  the  estimated  annual  revenue  of 
your  entire  organization? 

□  Over  $10  Billion 

□  $1  Billion  -  $9.9  Billion 

□  $500  Million  -  $999  Million 

□  $100  Million -$499  Million 

□  Less  than  $100  Million 

Would  you  like  to  receive  information  about  playing  in 
the  golf  outing  on  Monday,  April  3rd? 

□  Yes 

□  No 

Do  you  need  hotel  accommodations? 

□  Yes  (please  visit  www.etcentral.com  to  reserve) 

□  No 

Would  you  like  to  receive  a  complimentary 
subscription  to  Computerworld? 

□  Yes 

□  No 

Signature  Date 


□  I  am  a  Channel  Partner/ 
Integrator/Consultant 

(Complete  Attendee  Profile  above) 


□  $3,000  General  Conference  Package  (through  2/20/06) 
(includes  General  Conference;  Technical  and  Business  Tracks, 
SNIA-produced  Tutorials,  SNIA  Certification  “Test-Ready"  Courses) 


□  $3,500  General  Conference  Package  (after  2/20/06) 
(includes  General  Conference;  Technical  and  Business  Tracks, 
SNIA-produced  Tutorials,  SNIA  Certification  “Test-Ready"  Courses) 


By  participating  in  SNW's  Channel  Partner/Integrator  registration  package,  registrants  may  enjoy  the  following  benefits:  One  company  representative  may  receive  a  full  conference  pass  to  SNW  Spring 
2006;  additional  company  representatives  pay  the  prevailing  rate  for  full  conference  passes;  company  may  invite  up  to  five  IT  User  customers  to  attend  SNW  Spring  (IT  Users  must  be  strictly  compliant  with 
IT  User  definition  on  the  supplied  registration  form). 


)  My  company  is  Sponsoring/ 
Exhibiting  at  SNW 


□  $1,290  General  Conference  Package  (through  2/20/06) 
(includes  General  Conference,  plus  Technical  and  Business  Tracks, 
SNIA-produced  Tutorials,  SNIA-Certification  “Test-Ready"  Courses) 


□  $1,690  General  Conference  Package  (after  2/20/06) 
(includes  General  Conference,  plus  Technical  and  Business  Tracks, 
SNIA-produced  Tutorials,  SNIA-Certification  “Test-Ready”  Courses) 


As  a  sponsor,  you  may  be  eligible  to  attend  using  a  registration  provided  with  your  sponsorship.  (If  those  registrations  have  already  been  assigned/used,  then  you  may  register  at  the  prevailing  rates  above.) 
See  the  current  list  of  sponsors  at  www.snwusa.com.  Questions?  Call  1  -800-883-9090  or  email  snwreg@computerworld.com. 


□  I  am  a  representative  of  a  Non-Sponsoring  IT  Vendor  Company 

□  $5,000  Business  Development  Professional  Package  for  Sales,  Marketing 
and  Business  Development  Professionals  (includes  General  Conference  Sessions,  Expo,  Meals  & 
Receptions) 

Vendors  are  encouraged  to  participate  in  Storage  Networking  World  through  sponsorship.  (Details  are 
available  by  calling  Ann  Harris  at  508-820-8667.)  Alternatively,  vendors  (as  well  as  other  “non-IT  end-user" 
professionals  as  defined  by  Computerworld),  may  apply  for  registration  at  the  “non-sponsoring  vendor"  rate 
of  $5,000.  Determination  of  what  constitutes  a  “non-sponsoring  vendor"  registration  is  made  exclusively 
by  Computerworld.  Please  call  888-239-4505  with  questions. 


□  I  am  a  Financial/Equity  Analyst  and/or  Venture  Capital  Professional 

□  $1,290  (through  February  20,  2006)  □  $1,690  (after  February  20,  2006) 

General  Conference  Package  General  Conference  Package 

(includes  General  Conference  Sessions,  Expo,  (includes  General  Conference  Sessions, 

Meals  &  Receptions)  Expo,  Meals  &  Receptions) 

□  I  am  a  qualified  member  of  the  press.  I  can  verify  my  press  credentials. 
Press  should  call  Lisa  Langsdorf  at  Trylon  Communications,  2 1 2-725-2295,  to  register. 


Payment  Method 

□  Check 

(checks  must  be  received  by  March  1 3,  2006  payable  to:  Computerworld) 

Mail  to:  Computerworld,  Attn:  Josh  Ryan,  One  Speen  Street  Framingham,  MA  01 701 

□  American  Express  □  VISA  □  MasterCard 

Account  Number: _ 

Expiration  Date: _ 

Card  Holder  Name: _ 

Signature  of  Card  Holder: _ 

Cancellation  Policy  (All  of  the  following  require  written  notification  by  March  1 3,  2006.) 
In  the  event  of  cancellation,  the  registrant  has  three  options: 

1 )  He  or  she  may  substitute  another  attendee  for  this  conference. 

2)  He  or  she  may  transfer  this  registration  to  the  Storage  Networking  World  Fall  2006  conference 

3)  The  registration  fee  will  be  refunded,  less  a  $250  service  charge  (if  written  notice  is  received  by  March  1 3, 2006). 
Please  send  cancellation  requests  via  email  to:  snwreg@computerworld.com 


Please  fax  this  completed  application  to  1-508-820-8254 


Sessions  Starting  Soon! 


For  More  Information  call  310  694-0450  or  visit  www.developingtechnicalleaders.com 


"Paul  Glen's  insights  and  experience  provide 
the  keys  to  unlocking  the  potential  [of  geeks]." 

-Warren  Ben n is 


Developing  Technical  Leaders 

Program  with  Paul  Glen 

The  Developing  Technical  Leaders 
Program  helps  practicing  technical 
managers  excel  in  their  current  jobs 
and  grow  managerial  maturity  for 
the  future.  This  intensive  six-month 
program  helps  managers: 


o  Communicate  effectively 
o  Improve  relationships 
o  Motivate  staff 
o  Navigate  politics 
o  Think  critically 
o  Handle  stress 


All  in  the  unique  context  of  technical  organizations. 
Paul  Glen,  the  author  of  the  award-winning  book 
"Leading  Geeks"  and  Computerworld  columnist, 
designed  and  delivers  the  program. 


How  do  I  grow 

tomorrows 

technical 

leaders? 


Illustration  by  Dennis  Nishi 
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Continued  from  page  32 
offered  only  monitoring  and  alerting 
functions.  Now  most  have  added  real¬ 
time  blocking  capabilities,  a  feature  that 
some  companies  are  experimenting 
with  but  most  aren’t  yet  using.  Some 
vendors,  including  Tablus  Inc.  in  San 
Mateo,  Calif.,  have  added  products  that 
can  also  monitor  “at  rest”  content  on 
individual  workstations. 

Fidelity  Bancshares  Inc.  in  West 
Palm  Beach,  Fla.,  is  using  the  message¬ 
blocking  feature  in  Port  Authority  from 
PortAuthority  Technologies  Inc.  in  Palo 
Alto,  Calif.  Outbound  e-mail  messages 
that  contain  Social  Security  numbers, 
account  numbers,  loan  numbers  or 
other  personal  financial  data  are  inter¬ 
cepted  and  returned  to  the  user,  along 
with  instructions  on  how  to  send  the 
e-mail  securely. 

Joe  Cormier,  vice  president  of  net¬ 
work  services,  says  he  also  uses  Port- 
Authority  to  catch  careless  replies. 
Customers  often  send  in  questions  and 
include  their  account  information.  “The 
customer  service  rep  would  reply  back 
without  modifying  the  e-mail,”  he  says. 

Fear  of  false  positives  is  one  reason 
why  Fredriksen  started  out  using  only 
Vontu’s  monitoring  functionality.  Mini¬ 
mizing  false  positives  requires  tuning 
the  system,  investigating  the  causes  of 
false  positives  and  developing  policies 
to  work  around  or  avoid  them.  Fredrik¬ 
sen  warns  that  technology  alone  won’t 
succeed  unless  the  company  using  them 
has  a  strong  policy  for  handling  sensi¬ 
tive  data,  as  well  as  a  response  plan. 

“The  challenge  with  any  system  like 
this  is  they’re  only  as  valuable  as  the 
mitigation  procedures  you  have  on  the 
back  end,”  he  says.  Another  key  to  suc¬ 
cess,  says  Fredriksen,  is  educating  users 
about  monitoring  to  avoid  “Big  Brother” 
implications.  “[We  are]  making  sure 
that  the  users  understand  why  we 
implement  systems  like  this  and  what 
they’re  being  used  for,”  he  says. 

Henry  says  real-time  blocking  could 
cause  network  slowdowns  because  all 
traffic  must  be  routed  through  the  ap¬ 
pliance  before  being  forwarded  to  its 
destination.  For  now,  he  says,  most  or¬ 
ganizations  that  enable  blocking  avoid 
performance  problems  by  using  it  only 
at  the  network  perimeter,  where  band¬ 
width  is  significantly  lower,  rather  than 
inside  the  core  network. 

Cormier  focuses  on  e-mail  —  all  FTP, 
Web  mail  and  instant  messaging  traffic 
is  blocked  —  so  he  can  turn  on  blocking 
without  worrying  about  performance. 
But  he  says  false  positives  have  been  a 
problem  at  Fidelity  Bancshares  because 
some  account  numbers  match  legiti¬ 
mate  ZIP  codes  or  phone  numbers.  Cre- 


Pros 


O  Can  detect  and  block  the  dis¬ 
semination  of  sensitive  informa¬ 
tion  embedded  in  instant  mes¬ 
sages,  Web  mail,  FTP  uploads  and 
other  applications  as  the  traffic 
crosses  the  network. 

O  Require  little  maintenance  once 
set  up  and  configured. 

O  Linguistic  analysis  techniques 
allow  products  to  detect  sensitive 
content,  even  when  only  a  portion 
is  being  sent. 

O  Can  be  operated  by  non-IT  staff 
such  as  legal  or  HR  employees. 


Cons 


O  Can  be  expensive  to  purchase 
and  install. 

O  Real-time  blocking  requires  in¬ 
line  monitoring  of  network  pack¬ 
ets  that  could  create  a  choke  point. 

O  Blocking  feature  may  generate 
false  positives. 

O  Employee  education  is  required 
to  avoid  “Big  Brother”  perception 
of  monitoring  activity. 

O  Can’t  identify  content  embed¬ 
ded  within  encrypted  filds. 


ating  an  exception  would  leave  those 
account  numbers  vulnerable,  so  users 
have  been  trained  to  send  communica¬ 
tions  with  that  information  as  secure 
messages. 

Mark  Rizzo,  vice  president  of  op¬ 
erations  and  platform  engineering  at 
Perpetual  Entertainment  Inc.  in  San 
Francisco,  learned  in  a  previous  job  the 
consequences  of  not  protecting  intellec¬ 
tual  property.  “I  have  been  on  the  side 
of  things  disappearing  and  showing  up 
at  competitors,”  he  says.  The  start-up 
online  game  developer  deployed  Tablus’ 
Content  Alarm  to  remedy  the  problem. 
Rizzo  uses  it  to  look  for  suspicious  ac- 


WHILE  MOST  ORGANIZATIONS 

consider  using  network-based  outbound 
content  monitoring  tools  to  meet  regulatory 
compliance  needs,  the  systems  can  also 
help  detect  and  block  the  dissemination 
of  objectionable  or  illegal  content.  At  real 
estate  agency  Prudential  Americana  Group 
in  Las  Vegas,  the  problem  was  illegal  file 
swapping  on  agents’  PCs. 

“We  were  served  papers  by  Columbia, 
20th  Century  Fox  and  a  few  others  for  peo¬ 
ple  stealing  movies  and  using  our  service 
to  do  it,”  says  IT  Director  Tom  Araujo.  How¬ 
ever,  Araujo  can't  lock  down  or  otherwise 
manage  end  users’  PCs  because  his  com¬ 
pany  doesn't  own  the  equipment.  "The  way 
we  operate,  it’s  99°/o  independent  contrac¬ 
tors,”  he  says.  So  he  uses  PacketSure  from 
Ames,  Iowa-based  Palisade  Systems  Inc. 


tivity,  such  as  large  files  that  are  moving 
outside  of  the  corporate  LAN.  Now  that 
the  basic  policies  and  rules  have  been 
set,  the  system  doesn’t  require  much  on¬ 
going  maintenance,  he  says.  But  Rizzo 
says  he  doesn’t  use  blocking  because 
he  would  need  to  spend  significant 
amounts  of  time  creating  more  policies 
in  order  to  avoid  false  positives. 

While  companies  in  highly  regulated 
industries  can  justify  investing  in  out¬ 
bound  content  monitoring  and  block¬ 
ing  tools,  other  organizations  may  have 
to  sharpen  their  pencils  to  justify  the 
cost.  “These  are  very  expensive  solu¬ 
tions  to  deploy,”  says  Henry. 


to  monitor  and  block  file  swapping  and 
other  inappropriate  traffic  on  the  PCs  of  his 
1,684  users.  By  tuning  PacketSure,  Araujo 
eliminated  traffic  associated  with  popular 
file-sharing  programs  such  as  Grokster  and 
Kazaa.  Prudential  also  blocks  all  credit  card 
and  Social  Security  numbers. 

However,  Araujo  must  be  careful  that 
overzealous  use  of  compliance  tools 
doesn’t  impinge  on  the  business.  “I  haven’t 
got  any  idea  where  the  next  lead  or  con¬ 
nection  is  going  to  come  from  for  someone 
to  get  the  next  piece  of  business,”  he  says. 
But  stealing  on  company  time  is  a  clear  no- 
no.  “I  can't  control  what  agents  do  on  their 
own  time,  but  I  do  have  an  issue  with  them 
downloading  funniest  home  videos  or  shar¬ 
ing  information  that’s  nonbusinesslike." 

-ROBERT  L.  MITCHELL 


Fredriksen,  who  built  a  system  to 
support  16,000  users,  says  that  for  a 
setup  with  about  20,000  users,  “you’re 
in  the  $200,000  range,  easily.” 

Prices  range  from  $6  to  $40  per  user, 
depending  on  the  size  of  the  deploy¬ 
ment,  says  Burke.  However,  companies 
in  less  regulated  industries  are  increas¬ 
ingly  interested  despite  the  costs.  The 
reason:  They’re  aware  that  the  conse¬ 
quences  of  intellectual  property  loss, 
releases  of  customer  information  or 
inappropriate  leakage  of  financial  data 
can  be  very  damaging. 

Timing  It  Right 

The  market  is  currently  dominated  by 
smaller  players,  but  other  vendors  are 
entering.  For  example,  CipherTrust  Inc. 
and  Proofpoint  Systems  Inc.,  which  sell 
e-mail  content  filtering  products,  have 
announced  new  offerings,  says  Burke. 
“Any  space  that  grows  by  70%  is  going 
to  attract  the  established  security  play¬ 
ers,”  he  says. 

So,  should  you  wait  to  buy?  Not  nec¬ 
essarily,  says  Burke.  Many  organiza¬ 
tions  don’t  want  to  buy  different  point 
products  to  protect  each  communica¬ 
tion  channel,  he  says. 

Using  application-specific  tools  isn’t 
necessarily  a  bad  idea,  however,  espe¬ 
cially  if  your  organization  already  has 
them,  says  Henry.  The  need  for  multi¬ 
protocol  content-filtering  tools  may  be 
at  least  partly  mitigated  by  existing 
security  mechanisms.  Users  that  have 
outbound  e-mail  content  filtering,  URL 
blocking  and  instant  messaging  con¬ 
trols  in  place  already  have  some  protec¬ 
tion,  although  such  tools  don’t  generally 
do  the  same  level  of  linguistic  analysis. 

You  should  also  consider  the  possibil¬ 
ity  of  conflicts  with  other  security  tools. 
Network-based  content-monitoring 
software  can  detect  encrypted  files  and 
interpret  them  in  some  contexts,  but  it 
can’t  read  the  content.  That  puts  it  at 
odds  with  other  outbound  content  man¬ 
agement  tools  that  encrypt  documents, 
such  as  e-mail  security  applications  and 
enterprise  rights  management  software, 
says  Henry. 

Fredriksen  says  that  although  Vontu 
is  important,  it’s  still  just  one  piece  of 
a  larger  strategy  that  includes  an  over¬ 
lapping  set  of  controls  that  Raymond 
James  uses  to  combat  insider  threats. 
“This  augments  the  intrusion-detection 
and  firewall  systems  we  have  that  con¬ 
trol  and  block  specific  ports,”  he  says. 
“It’s  just  a  piece.  It’s  not  the  Holy  Grail.” » 

MORE  ONLINE 

Visit  our  Web  site  for  a  list  of  vendors  offering 
multiprotocol  content-filtering  tools. 

www.computerworld.com/thisweek 


Block  That  Swap 
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_THE  INVASION 


_DAY  11:  These  commoditized  clones  have  taken  over. 
Haven’t  been  outside  in  days.  Living  off  instant 
coffee  and  a  tin  of  breath  mints. 

_DAY  12:  They’re  breeding.  Multiplying.  Multiple 
apps.  Multiple  databases.  They  must  have  a  queen. 
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Supercomputing 

T^Turns  Toward  1  A  •  •  , 

Productivity 


O  IT  managers,  high-stakes 
supercomputing  may  seem 
like  the  land-speed  record:  a 
freak  show,  amusing  but  hard¬ 
ly  relevant.  Oh,  a  car  broke  Mach  1?  And 
a  defense  lab  has  a  280  TFLOPS  com¬ 
puter?  Cool.  Now  let’s  get  back  to  work. 

However,  supercomputing  special¬ 
ists  are  wrestling  with  problems  that 
will  affect  everyday  IT  within  the  next 
two  to  five  years.  Essentially,  improve¬ 
ments  in  processors  have  outstripped 
those  in  data  movement.  For  some 
time  now,  the  limiting  factor  in  high- 
performance  computing  has  been  the 
speed  with  which  data  can  be  moved 
to  and  from  the  processors.  Indeed,  the 
cylindrical  shape  of  the  iconic  Cray 
supercomputers  is  an  effort  to  limit  the 
distances  data  must  flow. 

Because  supercomputing  is  the  sharp 
end  of  the  technology  spear,  these 
data-flow  problems  —  still  manageable 
in  most  corporate  data  centers  —  are 
quickly  reaching  critical  mass  in  the 
world’s  top  research  facilities.  Break¬ 
throughs  are  needed,  and  experts  ac¬ 
knowledge  that  answers  are  elusive. 

Backdrop:  Multicore,  Clusters 

There  are  two  key  factors  in  today’s  su¬ 
percomputing  tumult:  multicore  chips 
and  the  rise  of  “cluster”  supercomput¬ 
ers  composed  of  hundreds  or  thou¬ 
sands  of  humble  Intel-style  CPUs. 

Multicore  chips  place  more  than  one 
processor  on  a  single  integrated  circuit. 


Dual-core  PCs  are  already  common, 
and  experts  believe  this  Moore’s  Law- 
driven  progression  will  continue  so 
that  by  2010,  your  garden-variety  chip 
will  house  64  processors.  With  each  of 
these  processors  running  four  software 
threads  at  once,  256  threads  could  be  si¬ 
multaneously  executed  on  a  single  chip. 

Jack  Dongarra,  a  computer  science 
professor  at  the  University  of  Tennes¬ 
see  and  the  keeper  of  the  list  of  the 
world’s  top  500  supercomputers,  says 
these  elite  machines  typically  cluster 
500  to  1,000  processors.  The  current 
top  gun,  the  IBM  Blue  Gene  at  Law¬ 
rence  Livermore  National  Laboratory, 
can  process  280  trillion  floating-point 
operations  per  second  (TFLOPS)  and 
clusters  a  staggering  131,072  proces¬ 
sors.  Those  clusters  must  rapidly  move 
huge  quantities  of  information  from 
memory  to  all  those  processors  and 
back  again.  The  bandwidth  needed  for 
this  data  flow,  along  with  the  latency 
caused  by  the  sheer  distances  involved, 
effectively  caps  the  amount  of  work  the 
computer  can  do. 

Dongarra  says  that  more  than  60% 
of  the  top  500  computers  are  clustered 
rather  than  relying  on  the  traditional 
exotic  architectures  most  commonly 
associated  with  Seattle-based  Cray  Inc. 


“Clusters  have  completely  changed  the 
scientific  computing  landscape,”  he  says, 
because  they  offer  a  price/performance 
ratio  that  exotic  machines  can’t  touch. 

Moreover,  as  clusters  have  become 
popular,  users  have  found  “a  surpris¬ 
ingly  large  number  of  real-world  appli¬ 
cations  that  do  not  require  the  extreme 
latency  and  bandwidth  capabilities  of 
the  exotics,”  says  Justin  Rattner,  a  dis¬ 
tinguished  fellow  at  Intel  Corp. 

However,  as  users  call  for  more  pow¬ 
erful  tools,  Cray  executives  believe  the 
supercomputing  pendulum  is  swinging 
back  their  way  —  and  some  research 
scientists  agree.  Indeed,  they  say,  it’s 
possible  that  before  2015,  exotic  super¬ 
computers,  with  their  benefits  of  low 
latency  and  high  bandwidth,  will  join 
clusters,  with  their  price  advantage,  in 
hybrid  architectures  suitable  for  a  vari¬ 
ety  of  applications. 

According  to  Jan  Silverman,  a  senior 
vice  president  of  corporate  strategy  at 
Cray,  the  company  is  working  on  com¬ 
pilers  that  can  distinguish  code  best 
suited  to  its  vector  processors  —  which 
can  operate  on  a  whole  string  of  num¬ 
bers  at  once  —  from  code  best  run  on 
a  more  pedestrian  scalar  processor. 
These  compilers,  which  Silverman  says 
will  be  in  production  by  2009,  will  be 
able  to  schedule  vector  and  scalar  work 
for  the  hybrid  supercomputer.  Other¬ 
wise,  this  slow  and  difficult  scheduling 
work  would  fall  to  programmers. 

Plan  Ahead 

To  exploit  the  parallelism  inherent  in 
software  as  fully  as  possible,  IBM  Re¬ 
search,  among  others,  is  trying  to  allow 
processes  to  run  out  of  order  and  then 
be  reassembled  on  the  fly  in  a  process 
it  calls  speculative  multithreading. 

A1  Gara,  chief  architect  for  IBM’s  Blue 


Gene,  calls  it  a  potential  breakthrough, 
but  as  the  number  of  threads  increases, 
the  components  that  must  eventually 
be  reassembled  into  the  final  result 
grow  exponentially.  “You  need  a  com¬ 
bination  of  hardware  [and]  software  to 
guarantee  correctness,”  he  says,  “with 
an  assist  from  the  compiler.” 

The  Defense  Advanced  Research 
Projects  Agency  has  a  program  called 
High  Productivity  Computing  Systems 
aimed  at  doubling  the  productivity  of 
scientific  computers  every  18  months 
until  at  least  2010.  In  response,  several 
academic  researchers  are  working  on 
languages  and  compilers  for  parallel 
and  high-performance  computing. 

For  example,  Ken  Kennedy,  director 
of  the  Center  for  High  Performance 
Software  Research  at  Rice  University, 
is  developing  a  system  that  uses  a 
library  of  components  to  generate  high- 
performance  compilers  for  specific 
scientific  domains,  such  as  biological 
computing  or  signal  processing. 

He’s  also  exploring  ways  to  “parallel¬ 
ize”  Matlab,  a  favorite  of  scientists  and 
engineers,  so  that  Matlab  arrays  can  be 
distributed  across  a  parallel  machine. 
Matlab  would  then  be  far  easier  to  use 
than  that  old  standby  Fortran,  which 
must  be  carefully  crafted  for  specific 
computer  architectures,  Kennedy  says. 

“It’s  important  to  have  big  comput¬ 
ers,”  he  says,  “but  there’s  two  parts  to 
that:  having  a  computer  and  being  able 
to  use  it.  High-end  computing  has  been 
overly  limited  to  people  who  are  really 
expert  in  programming.  We  have  to  not 
only  go  for  very  high  performance,  but 
for  very  high  productivity.”  » 


Ulfelder  is  a  freelance  writer  in 
Southboro,  Mass.  Contact  him  at 
steve@ulfelder.com. 


The  world’s  fastest  supercomputer,  the 
IBM  Blue  Gene/L  at  Lawrence  Livermore 
National  Laboratory,  applies  its  131,072 
processors  to  problems  in  molecular  dynamics. 


,  I. 


i  have  control,  i  have  a  new  IBM  System  /'5. 


/  control  complexity.  The  one-of-a-kind  System  i5  is  server, 
storage,  software,  database,  and  security,  all  in  one. 

i  control  reliability.  The  System  i5  platform  helps  keep  you  up 
and  running  so  you  can  focus  on  your  business,  not  your  I.  T. 

i  control  flexibility.  This  uniguely  customizable  platform  lets 
you  run  multiple  operating  systems  (Windows',  Linux?  AIX 5LT 
and  i5/0S’)  simultaneously. 


i  control  my  I.  T.  destiny.  IBM  Systems  are  a  range  of  innovative 
servers  and  storage  -  like  the  System  i5  -  designed  to  make  your 
infrastructure  and  your  life  simpler. 


f 


I 


IBM  C0M/TAKEBACKC0NTR0L/i5 


•Requires  IXS  or  IXA  to  run  Windows.  Linux,  Microsoft  Windows  and  AIX  5L  operating  systems  must  be  purchased  separately.  ISM,  AIX  5L,  System  15,  i5/OS,  and  Take  Back  Control  are  trademarks  or  registered  trademarks  of  International  Business 
Machines  Corporation  in  the  United  States  and/or  other  countries.  Linux  is  a  trademark  of  Linus  Torvalds  in  the  United  States,  other  countries,  or  both.  Microsoft  and  Windows  are  trademarks  of  Microsoft  Corporation  in  the  United  States,  other  countries, 
or  both.  Other  company,  product  and  service  names  may  be  trademarks  or  service  marks  of  others.  ©2006  IBM  Corporation.  All  rights  reserved. 
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Job  Interview  Raises 
Plenty  of  Questions 


Our  manager  thinks  about  changing  jobs 
but  finds  that  the  applicant  is  sometimes 
the  better-prepared  party.  By  C.  J.  Kelly 


Even  though  I  had 

promised  myself  I  was 
going  to  settle  down 
and  be  happy  in  my 
current  job,  I  interviewed  for 
a  security  manager  position  at 
a  large  medical  center.  It  was 
closer  to  home  and  offered 
better  pay,  and  the  gung-ho 
recruiter  made  it  sound  like 
there  might  be  interesting 
projects  to  work  on. 

I  met  with  the 
CIO,  the  directors 
of  IT  and  software 
development,  and  the 
director  of  internal 
audit,  in  that  order. 

They  all  asked  what 
my  ideal  job  would  look  like. 
This  perennial  job-interview 
question  always  makes  me 
laugh  to  myself,  since  my  ideal 
is  no  job  at  all. 

I  am  honest  to  a  fault,  but 
there  are  some  things  you 
can’t  say  in  an  interview,  so 
I  have  learned  how  to  phrase 
the  truth  so  that  I  don’t  look 
like  a  complete  idiot.  I  said 
that  having  enjoyed  a  few 
years  of  independent  tech¬ 
nical  security  assessment 
consulting,  I  would  go  back 
into  that  line  of  work  full  time 
if  the  business  climate  was 
right.  Meanwhile,  I  am  look¬ 
ing  for  a  career  opportunity 
that  will  allow  me  to  contrib¬ 
ute  in  a  meaningful  way.  Blah, 
blah,  blah. 

No  Hollywood  Ending 

The  unvarnished  truth  is  that 
I  want  to  write  a  book  that 
would  become  the  basis  for  a 
hit  movie  series,  and  then  trav¬ 
el  the  world  and  write  stories 
about  exotic  places.  The  only 
technology  I  would  hang  on  to 
would  be  a  wireless  laptop  and 


cell  phone.  I  don’t  want  to  ever 
look  at  another  firewall  con¬ 
figuration  as  long  as  I  live. 

But  if  I  wasn’t  exactly  trans¬ 
parent  about  what  I  want  to  be 
when  I  grow  up,  they  weren’t 
too  sure  about  the  position 
they  were  trying  to  fill.  They 
all  had  different  answers  when 
I  asked  what  they  envisioned 
the  new  person  in  this  posi¬ 
tion  doing. 

That’s  not  too 
unusual,  but  it  was 
only  the  beginning 
of  the  confusion. 
The  job  descrip¬ 
tion  on  the  medical 
center’s  Web  site 
suggested  that  this  security 
manager  would  report  to  the 
CIO,  but  I  found  out  it  was 
being  moved  under  internal 
audit.  In  fact,  the  position  had 
changed  dramatically  in  the 
past  week  or  so,  and  the  CIO 
was  becoming  acting  chief 
security  officer  (CSO). 

Now,  I  have  strong  experi¬ 
ence  in  technical  security,  but 
it’s  a  very  different  world  from 
internal  audit.  Internal  audi¬ 
tors  talk  about  risk  manage¬ 
ment,  while  security  techies 
talk  about  specific  device  con¬ 
figurations.  They  are  talking 
about  the  same  things,  but  in 
different  languages  and  from 


They 
weren’t 
too  sure  about 
the  position  they 
were  trying  to 
fill.  They  all  had 
different  answers. 


different  perspectives.  I  know 
how  to  bridge  the  gap  between 
the  two,  and  I  understand  how 
open  ports  on  the  firewall, 
for  example,  can  become  a 
huge  risk  for  a  company  and 
have  material  impact.  But  that 
doesn’t  mean  I  speak  the  lan¬ 
guage  of  auditors. 

Muddled  Organization 

It  was  the  end  of  the  day  when 
I  finally  met  with  the  direc¬ 
tor  of  internal  audit.  By  then, 

I  had  more  questions  than 
answers.  But  if  one  of  those 
questions  was  whether  this  job 
would  work  out  for  me,  it  was 
pretty  much  answered  when 
he  said,  “I  have  met  with  sev¬ 
eral  people  who  have  as  many 
acronyms  after  their  name  as 
you  do,  but  they  are  just  go¬ 
ing  to  do  what  I  tell  them  to 
do.”  I  just  had  to  laugh  and  say, 
“That  has  never  been  me.  I’m 
kind  of  opinionated.” 

He  must  have  realized  that 
I  was  concerned  about  report¬ 
ing  to  internal  audit,  and  our 
discussion  led  me  to  draw  an 
organizational  chart  on  a  sheet 
of  paper.  On  my  chart,  IT  was 
separate  from  internal  audit 
and  from  what  I  called  “busi¬ 
ness  controls.”  Under  that 
heading  were  information 
security,  disaster  recovery  and 
business  continuity.  Each  of 
these  three  disciplines  report¬ 
ed  to  a  separate  C-level  execu¬ 
tive,  with  IT  reporting  to  the 
CIO,  internal  audit  to  the  chief 
financial  officer  or  CEO,  and 
business  controls  to  either  the 
chief  operating  officer  or  CSO. 
This  avoids  the  problem  of  the 
fox  guarding  the  henhouse. 

But  my  ideal  organization  is 
likely  to  be  adopted  about  the 
time  that  I  begin  collecting 
royalties  from  my  Harry  Pot¬ 
ter-  style  movie  franchise.  The 
bottom  line  is  that  most  orga¬ 
nizations,  and  certainly  this 
one,  don’t  understand  the  mag¬ 
nitude  of  the  tasks  they  want 
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these  disciplines  to  undertake, 
and  they  aren’t  yet  willing  to 
properly  staff  for  it  all. 

As  we  ran  out  of  time,  the 
internal  audit  director  asked 
whether  I  would  meet  with 
him  again  so  that  he  could 
convince  me  that  the  position 
could  flourish  under  his  de¬ 
partment,  given  a  chance  and 
the  right  leader. 

I  had  the  Presidents’  Day 
weekend  to  think.  As  I  re¬ 
viewed  things,  the  organiza¬ 
tional  dynamics  were  a  red 
flag.  The  fact  that  the  CIO  had 
rushed  to  have  himself  named 
acting  CSO  even  though  that 
meant  surrendering  a  security 
direct  report  to  the  auditor  led 
me  to  believe  that  he  wasn’t 
too  keen  about  security  being 
moved  out  from  under  him. 
The  software  development 
director  was  looking  for  ap¬ 
plication  security  guidance, 
which  I  am  a  little  weak  on. 
And  then  there  was  the  audit 
director,  who  was  new  to  the 
organization,  full  of  ideas  and 
wanted  to  shake  things  up  and 
own  information  security.  At 
least  the  IT  director  knew  that 
his  “WAN  guys”  had  security 
nailed  down,  which  would 
make  his  team  an  important 
ally.  But  what  a  mixed  bag. 

And  in  that  bag,  they 
wanted  technical  security 
architecture  review,  security 
assessment,  security  aware¬ 
ness  training,  internal  audit, 
documentation,  leadership 
and  a  whole  lot  more.  What 
they  need  is  at  least  one  tech¬ 
nical  security  expert  in  IT,  se¬ 
curity  training  for  the  IT  guys, 
a  person  devoted  to  security 
awareness  and  training,  inter¬ 
nal  audit  as  a  separate  func¬ 
tion,  employees  devoted  to  di¬ 
saster  recovery,  and  business 
continuity  planning  under  a 
separate  banner.  It  came  to  me 
that  maybe  I  should  just  hold 
on  and  write  that  book.  * 


WHAT  DO  YOU  THINK? 

This  week's  journal  is  written  by  a  real 
security  manager,  "C.J.  Kelly,''  whose  name 
and  employer  have  been  disguised  for 
obvious  reasons.  Contact  her  at  mscjkelly® 
yahoo.com,  or  join  the  discussions  in  our 
security  blogs:  computerworld.com/ 
blogs/security 

To  find  a  complete  archive  of  our  Security 
Manager's  Journals,  go  online  to 

computerworld.com/secjournal 


Movie  Review 

Firewall,  starring 
Harrison  Ford 

Indiana  Jones  as  an  infosec 
action  hero?  I  had  to  see 
that.  The  question  was, 
would  I  be  rolling  my  eyes  at 
every  implausibility  on  the 
screen?  Surprisingly,  the 
technical  security  aspects 
were  pretty  accurate  for 
Hollywood:  a  locked-down 
data  center  with  no  remote 
access,  servers  with  no 
available  USB  or  serial  ports, 
a  sprinkling  of  biometrics, 
smart-card  technology  and 
strong  physical  security.  I 
had  a  hard  time  figuring  out 
how  our  hero  connected  a 
fax  machine’s  scanner  bar 
to  an  MP3  player  to  gamer 
bank  account  numbers  from 
a  screen*  in  fact,  I  almost 
took  apart  my  fax  machine 
and  my  son’s  MP3  player  to 
see  if  i  could  duplicate  this 
feat.  But  what  the  heck,  it’s 
only  a  movie.  Still,  if  I  were 
the  bad  guy,  I  would  have 
found  an  easier  way  to  steal 
the  bank’s  millions  than  to 
go  up  against  Harrison  Ford. 

-  C.J.  Kelly 

IPolicy  Centralizes 
Firewall  Controls 

IPolicy  Networks  Inc.  today 
announced  the  general 
availability  of  Version  2.5  of 
its  iPolicy  Security  Manager 
and  Intrusion  Prevention 
Firewalls  for  enterprises 
and  service  providers.  The 
product  allows  central 
management  of  up  to  600 
firewalls  across  a  geograph¬ 
ically  dispersed  network. 


Virus  Is  a 

A  mystery  is  deepening 
around  a  virus  that  can 
pass  from  a  PC  to  a  mobile 
device.  The  Mobile  Antivirus 
Researchers  Association 
said  last  week  that  it  anony¬ 
mously  received  the  code, 
named  “Crossover.”  Anti¬ 
virus  vendors,  however,  said 
they  haven’t  been  allowed 
to  analyze  it. 
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DEFINE  YOUR  OPEN  ENTERPRISE™ 

In  my  Open  Enterprise,  productivity  is 
up  because  workgroup  solutions  actually 
work  the  way  groups  want  them  to. 

People  are  more  productive  when  they  have  the  tools  and  support 
they  need  to  work  more  efficiently.  Workgroup  solutions  from 
Novell®  unite  infrastructure,  services  and  tools  with  unmatched 
security  and  reliability.  Regardless  of  location  or  device.  Our 
full  suite  of  networking,  communication  and  collaboration 
services  support  more  users  on  a  single  server,  simplifying 
administration  and  significantly  reducing  costs.  So  you 
can  communicate  and  collaborate  the  way  you  want, 
wherever  you  want — for  a  lot  less  than  you’d  think. 

Workgroup  solutions  from  Novell. 

This  is  the  way  to  connect  your  Open  Enterprise. 


Novell 

This  is  Your  Open  Enterprise." 

www.novell.com/connect 


Copyright  ©  2006  Novell,  Inc.  All  Rights  Reserved.  Novell,  the  Novell  logo  and  GroupWise  are  registered  trademarks, 
This  is  Your  Open  Enterprise  and  Define  your  Open  Enterprise  are  trademarks  of  Novell,  Inc.  in  the  United  States  and 
other  countries.  All  third-party  trademarks  are  the  property  ol  their  respective  owners. 
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Parasoft  Rolls  Out 
New  Testing  Tool 

■  Parasoft  Corp.  has  released 
Parasoft  SOAtest  4.5,  an  auto¬ 
mated  Web  services  testing 
product.  The  application  features 
enhanced  service-oriented  archi¬ 
tecture  governance  controls  for 
development,  broader  test  man¬ 
agement  support  and  automated 
testing  of  the  Business  Process 
Execution  Language,  according 
to  the  Monrovia,  Calif.-based 
company.  SOAtest  4.5  provides 
validation  of  compliance  with 
a  wide  range  of  Web  standards, 
including  those  set  by  the  Or¬ 
ganization  for  the  Advancement 
of  Structured  Information  Stan¬ 
dards.  It  also  offers  best  prac¬ 
tices  for  security,  maintainability 
and  reusability,  and  integrates 
directly  with  Mercury  Interactive 
Corp.’s  TestDirector  and  IBM’s 
Rational  TestManager.  It  is  avail¬ 
able  now  for  Windows  2000, 
Windows  XP,  Linux  and  Solaris. 
Pricing  starts  at  $3,995. 


PeopleCube  Updates 
Resource  Application 

■  PeopleCube  in  Waltham,  Mass., 
has  unveiled  the  latest  version 
of  its  Resource  Scheduler  soft¬ 
ware,  which  is  available  now  as 
a  hosted  application  or  through 
a  standard  software  licensing 
agreement.  Resource  Scheduler, 
a  Web-based  meeting-room 
and  resource  management  ap¬ 
plication,  now  offers  two  add-on 
services  and  asset  management 
modules,  according  to  the  com¬ 
pany.  Under  a  standard  license 
model,  pricing  starts  at  $40  per 
user,  while  hosted  delivery  starts 
at  $3  per  user  plus  start-up  fees, 
based  on  customer  requirements. 


LSI  Logic  Launches 
New  Line  of  HBAs 

■  LSI  Logic  Corp.  in  Milpitas, 
Calif.,  has  introduced  a  family 
of  serial-attached  SCSI  host 
bus  adapters  for  internal  and 
external  storage.  The  new  line 
includes  one  four-port  control¬ 
ler  and  three  new  eight-port 
controllers,  as  well  as  hardware- 
based  RAID  functionality.  Retail 
prices  range  from  $205  to  $260. 
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A  Broadband  Primer 
For  Telecommuters 


ONE  GENERALIZATION  we  can  make 
about  computing  is  that  over  time,  most 
technology  items  become  cheaper,  while 
at  the  same  time,  they  become  faster.  This 
is  true  of  broadband  in  its  most  common 
forms.  Both  Digital  Subscriber  Line  (DSL)  and  high¬ 
speed  Internet  cable  services  are  available  to  millions  of 
business  and  residential  users  worldwide  and  are  now 


cheaper  and  faster  than 
ever.  Which  is  better  for 
your  situation  as  a  tele¬ 
commuter  depends  on 
your  needs  as  well  as  what 
you  or  your  company  is 
willing  to  pay. 

DSL  employs  sophisti¬ 
cated  modulation  schemes 
to  pack  data  onto  copper 
wires  and  uses  existing 
telephone  lines  to  connect 
your  home  directly  to  your 
local  phone  company  in 
order  to  link  you  to  the 
Internet. 

Satisfied  users  cite  a  variety  of  rea¬ 
sons  for  their  approval  of  DSL.  The 
direct  connection  between  your  phone 
and  the  phone  company  makes  DSL 
very  secure.  DSL  is  just  as  reliable  as 
your  phone  line,  and  it  boasts  speedy 
upload  and  download  rates.  Another 
advantage  is  that  you  can  be  online 
and  on  the  telephone  simultaneously. 

When  you  sign  up  for  DSL,  your  lo¬ 
cal  phone  company  will  usually  offer 
you  the  option  of  installing  the  equip¬ 
ment  yourself  and  will  provide  you 
with  a  modem  to  convert  the  phone 
company’s  data  format  to  one  that  is 
compatible  with  your  own  network. 
They’ll  also  provide  one  filter  for  each 
regular  telephone  in  your  home  so 
that  when  someone  is  online,  Internet 
traffic  noise  won’t  interfere  with  your 
phone  conversations. 

What  about  the  downsides  of  DSL? 

A  frequently  cited  disadvantage  of 
DSL  is  that  customers  must  be  located 


within  approximately  three 
miles  of  the  central  tele¬ 
phone  station. 

Another  common  com¬ 
plaint  is  that  the  signal 
can  become  degraded.  As 
I  mentioned,  users  have 
to  install  DSL  filters  onto 
their  telephone  jacks  be¬ 
cause  the  telephone  lines 
carry  both  normal  voice 
transmission  and  DSL  sig¬ 
nal  frequencies.  The  pres¬ 
ence  of  the  DSL  signal  on 
all  of  the  phone  wires  in 
the  house  (especially  when 
several  devices  are  connected  to  the 
line)  causes  the  degradation.  One  way 
around  it  is  to  install  just  one  filter  up¬ 
stream  from  all  of  the  phone  jacks  ex¬ 
cept  the  one  that  connects  to  the  DSL 
modem.  Not  an  easy  task,  especially 
when  you’re  faced  with  older  house¬ 
hold  telephone  wiring. 

If  you  decide  to  go  with  DSL,  you’ll 
be  given  options  as  to  the  speed  and 
type  of  your  connection.  The  most 
popular  is  Asymmetric  DSL,  or  ADSL, 
where  the  download  rates  exceed  the 
upload  rates,  because  most  users  tend 
to  do  wnload  more  than  they  upload. 
Within  ADSL,  bandwidth  speeds  vary 
as  well.  For  example,  Verizon’s  basic 
service  downloads  at  768Kbit/sec.  and 
uploads  at  128Kbit/sec. 

The  next  level  of  service  that  provid¬ 
ers  typically  offer  will  download  at 
1.5Mbit/sec.  and  upload  at  384Kbit/sec. 
The  elite  ADSL  level  provides  down¬ 
loads  between  3Mbit/sec.  and  5Mbit/ 
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sec.  and  uploads  at  640Kbit/sec.  to 
IMbit/sec.  Not  as  popular  for  the  home 
user  is  Symmetric  DSL,  which  pro¬ 
vides  the  same  download  and  upload 
speeds.  It’s  for  businesses  and  power 
telecommuters  who  send  and  receive 
lots  of  data. 

An  increasingly  popular  alternative 
to  DSL  is  to  go  online  in  your  home 
office  via  cable  lines.  This  option  is 
available  nearly  everywhere  you  can 
sign  up  for  cable  television.  Its  appeal 
lies  in  the  “always  on”  connection  and, 
theoretically  at  least,  very  good  con¬ 
nection  speeds. 

Your  local  cable  provider  supplies 
a  cable  modem  that  connects  to  the 
cable  line  and  an  Ethernet  cord  that 
leads  from  the  modem  to  your  com-  a 

puter.  The  Internet  provider  station 
is  connected  to  the  cable  company 
via  fiber-optic  cable.  Then  the  cable 
company’s  fiber-optic  line  connects 
an  entire  neighborhood  via  the  shared 
cable-modem  connections. 

Because  access  is  shared  among  all 
enrolled  computers  in  your  neighbor¬ 
hood  (it’s  like  a  LAN  —  but  it’s  for 
the  whole  community,  not  just  your 
house),  bandwidth  may  suffer,  as  can 
security.  Bandwidth  decreases  as  en¬ 
rollment  increases.  While  it  is  possible 
to  attain  downstream  connections  at 
3QMbit/sec.,  in  actuality,  you’re  more 
likely  to  get  500Kbit/sec.  to  700Kbit/ 
sec.  (and  128Kbit/sec.  upstream).  In 
general,  you’ll  realize  much  slower  up¬ 
load  speeds  compared  with  download 
speeds.  And  having  a  shared  network 
inherently  reduces  the  security  of  each 
individual  on  the  network. 

Both  DSL  and  cable-modem  connec¬ 
tions  enjoy  widespread  popularity,  so 
you’ll  have  to  weigh  the  pros  and  cons 
according  to  your  individual  needs. 

And  you  may  not  even  have  to  make  a 
decision  —  it’s  possible  that  only  one  is 
available  in  your  neighborhood. » 
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Criteria  Score 

Manageability  10.0 

Integration  9.0 

Interoperability  8.0 

Performance  8.0 

Scalability  9.0 

Reliability  8.0 

Value  8.0 
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Any  MFP  can  print  colorful  growth  charts. 
How  many  can  actually  help  you  achieve  them? 


INTRODUCING  THE  SHARP  MX-SERIES.  Thanks  to  the  revolutionary 
Open  Systems  Architecture,  these  multifunction  products  seamlessly  integrate  with  your 
network  to  keep  up  with  your  growing  business.  They  also  deliver  outstanding  color  and 
enhanced  productivity.  No  wonder  Sharp  MFPs  won  the  BLI  award  for  "IT  Friendliness." 
To  start  your  own  renaissance  of  color,  visit  sharpusa.com/documents 
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As  an  ENERGY  STAR’  Partner. 
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The  Sweet  Smell  of  Success 

Skunk  works  can  help  you  develop 
a  promising  project  with  less  risk 
that  the  plug  will  be  pulled  prema¬ 
turely.  Here  are  the  do’s  and  don’ts. 

PAGE  50 

Bringing  Homegrown  IT  to  Market 

In  the  year  since  it  launched  a  division 
focused  on  reselling  some  of  its  in-house 

IT,  Procter  &  Gamble  has  found  that  the 
effort  led  by  Bill  Metz  has  yielded  returns 
that  are  more  than  monetary.  PAGE  52 

OPINION 

What’s  an  MBA  Good  for  -  Really? 

We  know  all  about  the  credential  and  the  cost, 
says  Paul  Glen,  but  what  about  the  content?  He 
looks  at  what  the  coveted  degree  does  —  and 
doesn’t  —  provide.  PAGE  54 

Great  ideas  don’t  just  happen. 

Here’s  howto  light  up  your  IT  group. 


BOUT  A  year  and  a  half  ago, 
a  group  of  IT  directors  at 
Partners  Healthcare  System 
Inc.  took  a  look  at  their  1,200- 
strong  organization  and 
made  a  bold  admission:  They 
weren’t  as  creative  as  they  used  to  be. 
Despite  pioneering  technology  efforts 
in  the  ’80s  and  ’90s,  the  IT  group  faced 
a  health  care  landscape  that  was  more 
complex  and  competitive  than  it  was  10 
years  ago. 

“One  of  the  things  that  occurs  when 
you  grow  in  size  is  you  lose  a  bit  of 
your  entrepreneurship  and  innova¬ 
tion,”  says  Mark  Woodward,  corporate 


director  at  Boston-based  Partners.  “We 
wanted  to  try  to  get  some  of  that  back.” 

So  Woodward  researched  the  con¬ 
cept  of  innovation  —  what  it  looks  like, 
how  it’s  achieved  and  how  an  organiza¬ 
tion  can  incorporate  it  into  its  culture. 
“You  can’t  just  flip  a  switch,”  he  says. 

His  research  culminated  in  the 
January  launch  of  a  16-week  program 
that  takes  participants  on  a  carefully 
planned  but  ultimately  open-ended 
ride  to  becoming  innovators.  The 
16  participants  are  divided  into  four 
groups,  and  each  team  is  handed  a 
challenging  business  problem  to  re¬ 
solve.  All  are  then  deliberately  exposed 
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VVhere  Your  Adyantage  Lies 

Meet  customers’  needs  by  innovating  in  one  or  all  of  the 
three  basic  competencies  (inner  circle)  using  any  of  sev¬ 
eral  approaches  (outer  circle). 


,<ho.ns;gX'h 


Creating  a  new 
value  equation 


promoting 

wic  -a  ay'f1® 

and  pohcy 


Providing  Know-how 
And  Insight 

1.  Combining  and 
recombining  knowl¬ 
edge.  Indexing  Web 
content  for  easier  access 
and  use. 

2.  Storytelling.  Nike  Inc. 
imbued  its  athletic  wear  with  a  story:  “Do  it." 

3.  (Coun)selling  adoption  of  new  skills. 

Hewlett-Packard  Co.’s  executive  briefing 
center  changed  how  its  customers  experi¬ 
ence  its  offerings. 

4.  Co-creating  insight.  Wikipedia  trans¬ 
formed  an  encyclopedia  in  to  a  powerful, 
co-created  knowledge  base. 

Inventing  Goods 
And  Services 

5.  Inventing  enabling 
technologies.  The  micro¬ 
chip  enabled  innovation, 
from  cars  to  cell  phones  to 
medicine. 

6.  Creating  a  new  value 

equation.  Trader  Joe’s  “Two-Buck  Chuck” 
shifted  wine  drinkers'  expectations  from 
origin  to  taste. 

7.  Eliminating  barriers  to  participation. 

Grameen  Phone  Ltd.’s  microloans  and  kiosks 
in  India  enable  participants  to  rent  phone  ser¬ 
vice  in  villages  that  were  previously  without  it. 


8.  Cultivating  an  ecosystem.  Apple 
Computer  Inc.'s  iPod’s  ecosystem  includes 
iTunes,  the  iTunes  music  store,  downloadable 
music  and  videos  and  product  extensions 
from  partners  such  as  Bose  Corp. 

9.  Supporting  the  total  user  experience. 
Online  channel  integration  enables  seamless 
buying,  delivery  and  return  of  goods. 

10.  Designing  remarkable  performance. 
Oxo  International  Ltd.’s  ergonomic  kitchen 
tools  are  designed  from  the  user  backward. 


Enabling  Fulfilling 
Relationships 

11.  Increasing  connec¬ 
tivity.  Research  In  Mo¬ 
tion  Ltd.’s  BlackBerry. 

12.  Communicating 
and  magnifying  new 
values.  Virgin  Group 

Ltd.’s  businesses  are  linked  by  cultural  val¬ 
ues  that  disrupt  competitors  and  appeal  to 
customers. 

13.  Creating  supportive  environments. 

Herman  Miller  Inc.  changed  offices  and  work 
with  its  open  plans  in  the  1960s. 

14.  Promoting  behavioral  guidelines 
and  policy.  EBay’s  core  innovation  wasn't 
technology:  it  was  a  policy  for  fair  trading  on 
the  Web. 

15.  Forging  new  partnerships.  Wells 
Fargo  &  Co.  provides  in-store  banking 
through  a  partnership  with  Safeway  Inc. 


to  new  influences  far  from  the  comfort 
of  their  cubicles.  For  instance,  they 
are  immersed  in  the  work  of  users  in 
relevant  hospital  departments,  listen  to 
guest  speakers  and  go  on  thought- 
provoking  field  trips  such  as  a  visit  to 
the  MIT  AgeLab.  While  in  the  program, 
they  are  completely  mobile,  operating 
with  just  a  laptop,  a  handheld  device 
and  a  common  meeting  space  shared 
with  other  program  participants. 

The  hoped-for  result?  Individual 
metamorphosis,  the  rise  of  an  innova¬ 
tion  culture  in  IT  and  maybe  even 
proposed  solutions  to  the  assigned 
business  problems. 

SERIOUS  BUSINESS 

Partners’  program  illustrates  just  how 
seriously  some  organizations  are  tak¬ 
ing  innovation.  Although  innovation 
has  always  been  important,  there’s  a 
renewed  emphasis  on  right-brained 
approaches  to  succeeding  in  today’s 
increasingly  global,  hypercompetitive, 
unforgiving  business  world. 

“There  has  been  an  understandable 
focus  on  efficiency  and  globalization 
and  outsourcing,”  says  Jim  Eichner,  vice 
president  of  advanced  technology  at 
Pitney  Bowes  Inc.  in  Stamford,  Conn. 
“But  a  lot  of  those  things  have  played 
out  to  a  large  degree.  People  are  won¬ 
dering  how  to  differentiate  themselves, 
and  they  have  to  innovate  to  do  that.” 

“After  the  dot-com  bust,  companies 
kind  of  v/ent  internal,”  notes  Sally 
Grant,  CIO  at  the  California  State  Au¬ 
tomobile  Association  (CSAA)  in  San 
Francisco.  “But  efficiency  and  process 
are  not  going  to  take  us  to  greatness.” 
Or  to  put  it  another  way,  “You  can’t 
downsize  to  success,”  says  Scott  An¬ 
thony,  a  partner  at  Innosight  LLC,  a 
consultancy  in  Watertown,  Mass. 

But  the  goal  is  not  innovation  for  its 
own  sake;  a  key  element  of  current  ef¬ 
forts  is  to  stop  reacting  to  what  custom¬ 
ers  are  demanding  and  start  anticipat¬ 
ing  their  needs  even  before  they’ve  had 
a  chance  to  articulate  them. 

Examples  of  this  business  trend 
include  The  Procter  &  Gamble  Co.’s 
Swiffer,  a  replacement  for  the  old 
broom-and-mop  routine,  and  Earth- 
bound  Farm’s  prewashed  salad  mixes. 
m  “It’s  about  changing  the  status  quo  and 
|  delivering  something  of  such  value 
that  users  adopt  it  and  thereby  change 
<  what’s  ‘normal,’  ”  says  Tom  Andrews,  a 
j  principal  at  Stone  Yamashita  Partners, 

|  a  consultancy  in  San  Francisco, 
w  What  does  all  this  mean  for  IT? 

°  Well,  just  as  businesses  need  to  dif- 
ii  ferentiate  their  brands,  IT  also  needs  to 
|  prove  its  worth,  and  it  can  leverage  ki¬ 
rn  novation  to  accomplish  that  goal. 


t 

! 

“IT  has  to  think  of  themselves  like 
a  stand-alone  business,”  says  Joyce 
Wycoff,  co-founder  of  Innovation 
Network,  a  consultancy  in  Bakersfield, 

Calif.  “Somehow,  they  have  to  come 
up  with  a  vision  that  both  excites  them 
and  creates  value  for  their  customers.” 

But  for  many  IT  managers,  telling 
their  organizations  to  be  innovative 
is  about  as  helpful  as  telling  someone 
to  have  a  nice  day.  It’s  pretty  easy  to 
imagine  a  few  eye  rolls  among  people 
who  have  already  watched  their  orga¬ 
nizations  jump  on  other  expensive  and 
not-always-successful  management 
theory  bandwagons. 

That’s  why  jump-starting  a  culture 
of  innovation  goes  far  beyond  pin¬ 
ning  slogans  on  walls.  For  one  thing, 
it’s  important  to  create  a  process  for 
innovation  that’s  distinct  from  linear 
project  management  efforts,  which,  as 
Andrews  points  out,  are  optimized  for 
decisions,  not  for  trying  out  new  ideas. 

This  means  replacing  familiar  steps 
like  planning,  analysis,  design,  con¬ 
struction  and  quality  testing  with  new 
ones  like  problem  framing,  status  quo 
questioning,  observation  synthesis, 
hypothesis  mapping,  prototyping  and 
feedback-gathering. 

Key  to  the  process  is  directing  your 
efforts  at  a  question  or  problem  that 
you’re  trying  to  resolve.  Although 
you  want  people  to  think  outside  the 
box,  you  need  to  impose  some  type  of 
constraint  or  else  you  get  what  Wycoff 
calls  the  “popcorn  effect”  —  wild  ideas 
bouncing  around  with  no  purpose  in 
sight.  “The  old  mind-set  was  to  create 
a  bunch  of  ideas,  get  out  of  the  box  and 
let  the  creativity  flow,”  she  says.  “But 
now  we  realize  it’s  better  to  spend  a  lot 
of  upfront  time  defining  what  we  want 
to  do  and  exacting  criteria  for  success.” 

For  instance,  when  developing  Part¬ 
ners’  innovation  program,  Woodward 
polled  directors  on  long-standing  busi¬ 
ness  issues  they  wanted  to  address.  He 
came  up  with  four:  improving  patients’ 
telephone  interaction  with  the  hospital, 
establishing  a  regional  data  exchange 
for  hospitals  to  share  information, 
providing  better  trend  data  on  chronic 
illnesses  and  learning  how  to  commod¬ 
itize  Partners’  IT  infrastructure. 

The  best  way  to  know  what  prob¬ 
lems  exist  is  to  experience  firsthand 
how  customers  interact  with  the  prod¬ 
ucts  and  services  you  offer.  “If  you  look 
at  a  highly  innovative  organization,  the 
first  characteristic  you  see  is  awareness 
—  awareness  of  the  needs  that  need 
to  be  fulfilled  and  of  the  know-how 
that’s  around  you,”  says  Robert  Price, 
former  CEO  of  Control  Data  Corp.  and 
Continued  on  page  47 
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Storage  Hardware 

Install  trusted  storage.  Move  up  to  an 
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Spend  less  time  managing  Exchange  with 

EMC  Storage  Administrator™  for  Exchange 
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Continued  from  page  44 
author  of  The  Eye  for  Innovation:  Rec¬ 
ognizing  Possibilities  and  Managing  the 
Creative  Enterprise  (Yale  University 
Press,  2005). 

At  Amazon.com  Inc.,  for  instance, 
the  mantra  is,  “Start  with  the  customer 
and  work  backwards,”  says  Werner 
Vogels,  CIO  at  the  Web  retailer.  Tech¬ 
nology  staffers  are  also  regular  users 
of  the  site,  and  most  undergo  a  training 
program  in  which  they  take  customer 
calls  and  respond  to  e-mails.  At  weekly 
meetings,  they  review  e-mails  that  cus¬ 
tomer  service  has  received  and  address 
frequent  questions.  “People  have  to  feel 
responsible  that  we’re  really  serving 
customers,”  Vogels  says. 

Similarly,  when  Pitney  Bowes  want¬ 
ed  to  develop  a  next-generation  call 
center  system  to  improve  interaction 
between  customer  service  represen¬ 
tatives  and  callers,  it  had  IT  staffers 
spend  weeks  in  the  call  center,  listen¬ 
ing  to  calls  and  studying  staff  needs. 

In  innovation  circles,  embedding 


Start 

Today 

An  innovation  culture  doesn't 
happen  overnight,  but  there  are 
things  you  can  begin  to  do  today 
to  encourage  innovation  and 
creativity. 


Look  for  duct  tape.  Gain 
insight  into  unspoken  customer 
needs  by  spending  just  a  little 
time  in  their  environment.  Joyce 
Wycoff,  co-founder  of  Innovation 
Network,  suggests  looking  for 
places  where  duct  tape  or  yellow 


stickies  have  been  applied,  or 
where  a  user  has  kludged  some¬ 
thing  together  to  accomplish  a 
task. 


Act  on  direct  observation. 

Schedule  one  day  a  month  for 
IT  staffers  to  spend  with  users 
and  let  that  experience  inform 
the  work  they  do,  suggests  Tom 
Kelley,  general  manager  at  Ideo. 
After  six  months,  “I'm  willing  to 
bet  IT’s  perceived  value  will  go 
up,”  he  says. 


Adopt  a  “reverse  mentor.” 

Ask  a  younger  worker  to  keep 
you  apprised  of  trends  outside 
your  purview,  Kelley  says.  The 
practice  has  helped  him  under¬ 
stand  blogging,  podcasting  and 


even  why  younger  people  don’t 
tend  to  wear  watches  (answer: 
cell  phones  keep  perfect  time). 


Do  brain  exercises.  Brainstorm 
with  people  in  different  industries. 
Analogies  from  architecture  or 
surgery  might  apply  to  your  own 
problem. 


Read.  Other  creative-thinking 
techniques  are  suggested  at 
www.thinksmart.com  and  by 
Barry  Nalebuff  and  Ian  Ayres  in 
their  book,  Why  Not?  How  to 
Use  Everyday  Ingenuity  to  Solve 
Problems  Big  and  Small  (Harvard 
Business  School  Press,  2003). 
For  instance,  look  for  solutions  in 
other  contexts  that  can  apply  to 
your  own,  like  “flipping"  things, 


as  both  Heinz  and  Hunt’s  did  with 
ketchup  bottles  to  improve  ease 
of  use. 


Create  a  “war  room.”  "Teams 
need  a  place  to  continually  come 
back  to  that’s  not  torn  down  at 
the  end  of  the  day,”  says  Tom 
Andrews,  a  principal  at  Stone 
Yamashita  Partners.  It  has  to 
be  private  enough  for  them  to 
post  strategy  maps,  hypotheses, 
insights  and  ideas  on  the  walls 
or  on  whiteboards.  "It  gives  you 
the  ability  to  scan  the  material 
and  make  connections  in  a  vastly 
more  superior  way  than  through 
language  or  a  PowerPoint  docu¬ 
ment,”  he  says.  “It’s  vital  to  have 
a  collective  memory.” 

-  MARYBRANDEL 


yourself  within  a  community  of  people 
to  see  the  world  through  their  eyes  is 
sometimes  referred  to  as  “ethnogra¬ 
phy,”  and  it’s  highly  encouraged. 


“For  the  IT  department  to  be  moti¬ 
vated  by  true  human  insight  is  a  won¬ 
derful  thing,”  Andrews  says. 

The  idea  for  JetBlue  Airways  Corp.’s 


“paperless  cockpit”  germinated  from 
just  that  type  of  insight,  says  Todd 
Thompson,  CIO  at  the  Forest  Hills, 
N.Y.-based  airline.  “It  came  from  sit- 
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All  you  need  to  integrate  and  automate  processes,  reduce  unplanned 
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outages,  standardize  and  share  information  and  surpass  service-IOvel 
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commitments.  To  make  your  IT  organization  more  efficient  and 

If 

more  valuable,  download  our  whitepaper, at  www.maXi.mdit.com/cw  ;  : 

or  call  800-326-5765.  '  WMMm 


COUNTED 


IT  supports  and  controls  the 
applications  that  run  the  business. 
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How  We  Do  It 

Views  from  three  cutting-edge  IT  leaders 


AMAZON.COM  INC. 

According  to  CIO  Werner 
Vogels,  Amazon.com  can  never 
stop  pushing  the  limits  of  innovation 
in  the  areas  in  which  it  excels,  such  as 
search,  personalization  and  fulfillment. 

“All  these  areas  require  enormous 
innovation  to  remain  successful,”  he 
says. 

To  support  that  charter,  the  whole 
notion  of  IT  at  Amazon.com  is  pur¬ 
posefully  vague.  “There's  no  clear 
separation  between  the  business  and 
IT,”  Vogels  says. 

Instead,  IT  is  organized  into  small, 
loosely  coupled  groups.  These  are 
dubbed  “two-pizza  teams,”  given  that 


they  are  generally  no  larger  than  what 
you  could  feed  with  two  pizzas,  Vogels 
explains. 

Each  team  is  completely  autono¬ 
mous  in  developing  an  idea  and  is  re¬ 
sponsible  for  everything  from  scoping 
the  problem  to  actually  operating  the 
service  that  implements  the  idea. 

This  brings  the  team  into  close 
contact  with  the  customer  that  is  us¬ 
ing  its  service  and  allows  for  a  very 
fast  feedback  loop  to  improve  on  the 
innovation. 

Key  to  making  this  a  successful 
model,  Vogels  says,  is  to  hire  technolo¬ 
gists  who  thrive  on  working  in  small 
teams  with  equally  talented  people. 


JETBLUE  AIRWAYS  CORP. 

The  way  Todd  Thompson,  CIO 
at  JetBlue,  sees  it,  everything 
the  company  does  is  innovative,  from 
e-ticketing  to  the  televisions  in  each 
seat  back. 

“We  set  out  specifically  to  change 
the  way  customers  experience  the 
airline,”  he  says. 

To  support  that  goal,  teams  within 
IT  are  aligned  with  business  groups, 
and  a  project  manager  is  assigned  to 
each  business  department.  IT  work¬ 
ers  spend  at  least  one  day  per  month 
embedded  with  users.  That  way, 
Thompson  says,  “when  they  talk  about 
checking  in  a  customer  or  what  it’s 
like  in  the  cockpit,  we  know  what  that 
means." 

JetBlue  keeps  its  development 
process  light  through  quick  prototyping 
and  rapid  development  methods,  as 
well  as  Microsoft’s  .Net  architecture, 
Web  services  and  object-oriented 
methods. 


The  IT  group  is  always  ready  to 
respond  quickly  to  good  new  ideas. 
Thompson  boasts  that  high-impact/ 
low-effort  projects  can  blast  from  char¬ 
ter  to  execution  in  one  day. 

For  JetBlue,  innovation  is  a  make- 
or-break  proposition.  “The  industry  is 
so  competitive,  we’ve  had  to  do  things 
differently,”  Thompson  says.  “A  key  to 
our  ability  to  innovate  is  to  understand 
customer  needs  on  a  rubber-meets- 
the-road  basis  and  recommend 
technology  initiatives  that  improve 
the  experience  of  crew  members  and 
customers.” 


PITNEY  BOWES  INC. 

For  the  seven  years  he’s  worked 
at  Pitney  Bowes,  Jim  Eichner, 
vice  president  of  advanced  technol¬ 
ogy,  has  met  quarterly  with  company 
executives  to  review  what’s  happening 
with  technology  and  innovation  within 
the  company. 

What  has  changed  in  the  past  four 
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years  is  the  emphasis  on  customer¬ 
centric  innovation. 

"We  have  a  heavy  focus  on  getting 
out  of  the  lab  and  going  to  customer 
sites,  using  tools  borrowed  from  an¬ 
thropology  to  understand  customers  in 
their  world,  such  as  observing  people, 
artifacts,  settings,  relationships  and 
work  process,”  Eichner  says. 

Those  observations  are  used  to  cre¬ 
ate  a  hypothesis  of  a  customer  need, 
followed  by  a  brainstorming  process 
that  leads  to  what  Eichner  calls  a  low- 
fidelity  prototype.  This  is  a  system  or 
device  that  can  be  built  in  a  couple  of 
days  and  put  in  front  of  customers  to 
generate  feedback. 

This  feedback  helps  create  a  value 
proposition,  which  often  results  in  new 
product  development.  In  addition,  all 
ideas  serve  a  pre-existing  strategic 
opportunity,  such  as  how  to  get  people 
who  now  use  stamps  to  start  using 
metered  mail. 

-MARYBRANDEL 


ting  in  the  cockpit  and  seeing  pilots 
pull  out  books  from  those  heavy  cases 
they  carry  around,”  he  says.  And  after 
sitting  in  on  morning  meetings  with 
managers  while  they  continuously  re¬ 
viewed  operations  statistics  —  such  as 
average  baggage-retrieval  or  airplane- 
turnaround  time  —  IT  also  developed 
a  dashboard  system  that  pushes  that 
data  in  real  time  to  their  desktops. 

After  all,  Anthony  points  out,  much 
of  innovation  is  facilitating  the  jobs 
users  are  already  trying  to  accomplish 
—  not  enabling  them  to  do  something 
new.  “You  need  to  find  stuff  that  cus¬ 
tomers  haven’t  raised  their  hands  yet 
to  talk  about,”  says  Tom  Kelley,  general 
manager  of  Ideo  Inc.,  a  design  consul¬ 
tancy  in  Palo  Alto,  Calif. 

LOOKING  OUTSIDE 

Users  aren’t  the  only  place  to  turn  for 
ideas,  however.  Companies  striving  to 
be  innovators  also  look  outside  their 
four  walls  for  inspiration.  Not  only 
does  this  get  the  creative  juices  flow¬ 
ing  by  forcing  people  out  of  their  usual 
way  of  seeing  things,  but  it  also  may 
help  you  find  someone  who  has  already 
tackled  a  problem  you  want  to  solve. 

P&G  has  famously  established  a 
practice  of  “open  innovation”  by  con¬ 
necting  with  outside  experts  and  part¬ 
ners,  with  the  goal  of  getting  50%  of  its 
new  ideas  from  outside  the  company. 
And  no  wonder:  A  late-2005  Booz 
Allen  Hamilton  Inc.  study  of  1,000 
worldwide  public  companies  shows  no 
relationship  between  higher  levels  of 
research  and  development  spending 
and  high  levels  of  growth,  enterprise 


profitability  and  shareholder  return. 

And  it  just  makes  sense.  “If  you  think 
of  innovation  as  problem-solving  and 
you’re  the  problem-solver,  you’ll  take 
help  wherever  you  find  it,”  Price  says. 

Some  project  teams  visit  museums 
or  hardware  stores  or  invite  in  guest 
speakers  and  performers  —  even 
mimes  —  for  inspiration,  Wycoff  says. 
Or  they  look  for  an  example  of  a  com¬ 
pany  that’s  facing  a  similar  issue  but 
in  a  different  industry  or  environment. 
For  instance,  participants  in  Partners’ 
innovation  program  will  visit  compa¬ 
nies  outside  the  health  industry,  such 
as  Fidelity  Investments,  State  Street 
Corp.  and  P&G,  for  inspiration.  Wood¬ 
ward  can  also  imagine  sending  people 
to  Google  Inc.’s  headquarters  to  help 
figure  out  how  to  commoditize  Part¬ 
ners’  own  IT  infrastructure. 

“You  need  to  think  of  your  company 
as  an  ecosystem,”  Vogels  says.  “You 
want  to  leverage  the  intellectual  power 
of  the  larger  community.  There  might 
be  a  student  in  a  dorm  room  with  a 
bright  idea  [about]  Amazon.com,  and 
we’d  like  to  foster  that.” 

Pitney  Bowes  has  benefited  by  reach¬ 
ing  out  to  what  might  seem  like  strange 
bedfellows.  After  studying  Web  pur¬ 
chasing,  the  IT  department  collabo¬ 
rated  with  eBay  Inc.  as  well  as  its  own 
product  development  and  marketing 
groups  to  carve  out  a  niche  for  the 
company’s  otherwise  traditional  busi¬ 
ness.  It  developed  a  system  through 
which  eBay  sellers  can  download  post¬ 
age  and  shipping  labels.  “Great  compa¬ 
nies  get  people  together,”  Kelley  says. 

But  diversity  can  also  be  found 


within  a  company,  where  hiring  prac¬ 
tices  can  encourage  a  wide  range  of 
input.  At  CSAA,  Grant  likes  to  hire 
staffers  who  reflect  the  makeup  of  the 
company’s  membership.  “If  you  have  a 
diverse  workplace,  you  will  get  excel¬ 
lent  input,”  she  says. 

At  JetBlue,  the  company  purpose¬ 
fully  tries  to  hire  at  least  some  people 
from  outside  the  airline  industry, 
Thompson  says.  And  at  Partners, 
Woodward  took  pains  to  choose  people 
for  the  organization’s  innovation  proj¬ 
ects  who  had  no  previous  experience 
dealing  with  the  business  problem  at 
hand.  “We  didn’t  want  people  to  have 
preconceived  notions,”  he  says.  “It’s  a 
risk  and  a  higher  learning  curve,  but 
we  think  it’s  worth  it.” 

CELEBRATE  FAILURE 

Businesses  often  find  it  hard  to  accept 
that  innovation  goes  hand  in  hand  with 
failure.  “On  a  good  day,  nine  out  of  10 
efforts  will  fail,”  Andrews  says.  “You 
want  the  failures  to  be  as  good  a  learn¬ 
ing  experience  as  the  successes.” 

But  doing  that  means  changing  the 
way  companies  view  and  even  how 
they  talk  about  unsuccessful  projects. 
For  instance,  Andrews  says,  you  might 
talk  about  a  “failed  idea”  but  not  a 
“failed  team.”  Instead  of  talking  about 
“killing”  an  idea  or  project,  refer  to  it 
as  “putting  it  on  the  back  burner.”  And 
if  someone  comes  to  you  with  an  idea, 
don’t  point  out  all  the  things  that  are 
wrong  with  it;  ask  the  person  how  they 
can  make  it  even  better  for  the  cus¬ 
tomer,  giving  it  a  chance  to  morph  into 
something  successful.  This  attitude 


can  promote  thoughtful  risk-taking 
because  people  will  be  less  afraid  of 
presenting  ideas  without  a  lot  of  data  to 
back  themselves  up,  Andrews  says. 

In  fact,  innovative  companies  often 
celebrate  failure  —  literally.  W.L.  Gore 
Associates  Inc.,  best  known  as  the  de¬ 
veloper  of  Gore-Tex  fabric,  is  known 
to  end  unsuccessful  projects  with 
champagne.  Others  hold  “failure  par¬ 
ties”  in  which  refreshments  are  served 
and  managers  share  with  the  staff  their 
own  failed  project  experiences. 

Some  use  humor.  After  a  new  in¬ 
flight  snack  idea  was  tested  on  Jet¬ 
Blue  and  then  quickly  jettisoned,  “no 
one  was  fired  or  deeply  chagrined,” 
Thompson  says.  In  fact,  the  episode 
became  an  entertainment  device,  as 
a  picture  of  the  innovator  was  posted 
on  the  company  intranet,  along  with 
a  contest  to  write  an  essay  on  why  the 
change  was  silly.  “There’s  a  cultural 
acceptance  that  we’re  going  to  make 
mistakes  once  in  a  while  if  we’re  going 
to  be  innovative,”  Thompson  says. 

In  the  end,  innovation  is  a  slippery 
concept,  demanding  chaos  and  disci¬ 
pline,  process  and  flexibility,  New  Age 
approaches  and  old-fashioned  common 
sense.  After  all,  the  motivation  to  inno¬ 
vate  often  emanates  from  the  everyday 
thought,  “There  has  to  be  a  better  way.” 
Says  Price:  “It’s  about  really  giving  a 
damn  about  something  and  being  de¬ 
termined  to  find  the  know-how  to  help 
you  with  that  problem.” » 


Brandel  is  a  Computerworld  contribut¬ 
ing  writer  in  Newton,  Mass.  Contact  her 
at  marybrandel@verizon.net. 
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Sweet  Smell  of 


Skunk  works  can  help  you  develop  a  promising  project  with  less 
danger  that  the  plug  wi  I  be  pulled  prematurely.  By  Judy  Artunian 


IF  NECESSITY  is  the  mother  of  in¬ 
vention,  then  a  skunk  works  is  her 
creative  big  sister.  And  if  you  follow 
the  logic  of  that  family  tree,  neces¬ 
sity  is  also  the  mother  of  skunk  works. 

James  Dallas,  former  CIO  at  Atlanta- 
based  Georgia-Pacific  Corp.,  recalls 
becoming  a  skunk  works  devotee  after 
seeing  too  many  promising  projects 
labeled  failures  before  the  develop¬ 
ment  team  had  a  chance  to  get  all  of 
the  kinks  out.  “Within  a  large  corpora¬ 
tion,  whenever  you  do  something,  the 
spotlight  is  on  it,”  he  says.  “When  it’s 
not  successful,  people  can  be  too  quick 
to  cancel  it.  With  skunk  works,  you  can 
get  the  lessons  learned  in  a  real  roll- 
up-your-sleeves,  hands-on  manner 
that  is  away  from  the  spotlight.” 

Skunk  works  are  small  research  and 
development  groups  formed  to  produce 
a  technology  or  product.  While  the 
goal  of  a  traditional  skunk  works  is  to 
develop  a  commercial  product  or  tech¬ 
nology,  the  aim  of  an  IT  skunk  works  is 
to  solve  an  internal  business  problem. 

The  skunk  works  concept  dates  to 
1943,  when  a  group  of  employees  at 
Lockheed  Aircraft  Corp.  designed  and 
built  the  first  fighter  jet,  even  though 
the  company  didn’t  get  a  formal  con¬ 
tract  from  the  U.S.  Army  Air  Force 
until  the  employees  were  four  months 
into  the  project.  They  took  the  name 
“Skonk  Works”  from  the  “Li’l  Abner” 
comic  strip  (and  changed  it  to  Skunk 
Works  when  cartoonist  A1  Capp  com¬ 
plained).  Decades  later,  another  skunk- 
works-bred  product  made  headlines 
when  Apple  Computer  Inc.  introduced 
the  Macintosh  computer. 

IT  skunk  works  projects  vary  in  size 
and  scope,  depending  on  the  financial 
resources  and  manpower  available. 


On  the  ambitious  end  of  the  spectrum 
is  the  Tour  Optimization  Planning 
System  (TOPS)  developed  about  three 
years  ago  by  a  Georgia-Pacific  IT 
skunk  works.  TOPS  saved  the  company 
several  million  dollars  annually  by 
optimizing  the  routing  of  its  huge  dedi¬ 
cated  fleet  of  trucks,  says  Dallas. 

“It  allowed  us  to  factor  in  drivers, 
trailers,  destinations  and  traffic  lanes,” 
he  says.  “That  skunk  works  lasted  over 
a  year.  We  kept  going  through  itera¬ 
tions.  The  first  couple  didn’t  work,  but 
we  knew  there  was  value  there,  so  we 
didn’t  stop  it.” 

At  Bacon’s  Information  Inc.  in  Chica¬ 
go,  Scott  Thompson,  senior  vice  presi¬ 
dent  of  IT,  implements  a  more  modest 
form  of  skunk  works  when  his  depart¬ 
ment  needs  to  analyze  new  technolo¬ 
gies  and  products.  “It’s  difficult  to  take 
on  new  technology  these  days  because 
there  are  so  many  options  and  so  much 
complexity  regarding  how  these  things 
fit  together,”  says  Thompson.  “Skunk 
works  is  an  appropriate  approach  to 
building  some  expertise  in  order  to  be 
able  to  evaluate  technology.” 

Out  of  the  Public  Eye 

A  skunk  works  team  usually  consists 
of  a  handful  of  employees  from  the  IT 
department  who  have  demonstrated 
a  knack  for  taking  a  fresh  look  at  how 
technology  can  serve  the  organization. 

To  reduce  distractions,  many  IT 
managers  tuck  the  skunk  works  some¬ 
where  away  from  the  day-to-day  grind. 

Keeping  the  operation  under  wraps 
is  a  key  component  of  a  true  skunk 
works.  According  to  Rick  Swanborg, 
president  and  founder  of  Icex  Inc.  in 
Boston  and  executive  in  residence  at 
Boston  University’s  School  of  Man¬ 


agement,  “Sometimes  CIOs  have  no 
alternative  because  some  businesses 
consider  anything  technology-related 
as  nothing  more  than  a  cost  center. 
They  say,  ‘Why  are  you  spending  time 
looking  at  technology?  You  just  need 
to  control  costs.’  ”  Twenty  years  ago, 
Swanborg  was  involved  in  skunk  works 
that  developed  early  versions  of  dis¬ 
tributed  LANs  and  portable  computers. 

Executives  are  more  likely  to  accept 
and  help  fund  a  skunk  works  if  the  CIO 
can  show  how  the  project’s  goals  are 
aligned  with  corporate  objectives. 

Experts  advise  keeping  tabs  on  a 
skunk  works  but  stopping  short  of  im- 


DO’s  and  DON’Ts 


DO  establish  a  relationship  with  vendors 
whose  products  are  at  the  heart  of  your 
skunk  works,  so  that  they  will  help  you 
resolve  performance  problems. 

DO  encourage  skunk  works  staffers  to 
immerse  themselves  in  the  business  envi¬ 
ronments  in  which  the  product  or  technol¬ 
ogy  under  development  would  be  used. 

DO  congratulate  the  team  for  its  efforts, 
even  if  its  work  doesn’t  culminate  in  a 
project. 


DONT  allow  unfettered  experimentation. 
It  can  run  up  costs  and  stall  progress. 

DONT  be  in  a  hurry  to  put  your  technol¬ 
ogy  into  production.  Make  sure  it’s  stable 
and  scalable. 

DONT  wait  for  a  crisis  before  you  estab¬ 
lish  a  skunk  works  to  solve  a  problem. 


posing  a  schedule.  “The  nature  of  re¬ 
search  is  uncertain.  It’s  hard  to  predict 
when  you’ll  discover  something,”  says 
Jeffrey  Kaplan,  a  director  in  the  Wash¬ 
ington  office  of  PRTM  Management 
Consultants  and  author  of  the  book 
Strategic  IT  Portfolio  Management 
(PTRM  Inc.,  2005). 

At  Georgia-Pacific,  Dallas  required 
his  skunk  works  to  come  back  with  the 
results  of  a  hands-on  test  in  the  first  60 
days.  For  example,  a  skunk  works  team 
that  was  developing  radio  frequency 
identification  technology  several 
years  ago  had  to  apply  RFID  tags  and 
determine  what  percentage  had  been 
successfully  read  by  the  sensors.  The 
skunk  works  squads  knew  that  without 
that  first  deliverable,  which  had  to  be 
produced  for  less  than  $50,000,  their 
project  could  be  axed.  “You  would  be 
amazed  by  how  creative  that  would 
make  people,”  says  Dallas.  “Depending 
on  the  technology,  they’d  go  out  and 
partner  with  a  vendor,  and  the  vendor 
would  get  creative  with  them.” 

When  is  a  skunk  works  endeavor 
ready  to  become  a  legitimate  project? 
“If  you’re  starting  to  develop  code  and 
a  prototype,  you’re  on  the  fringe  of  a 
legitimate  project,”  says  Kaplan.  But 
first,  be  sure  that  you  have  a  proposed 
solution  that  meets  a  clear  need  and  is 
viable,  given  technological  and  funding 
limitations. 

Funding  the  Works 

Skunk  works  aren’t  economically  vi¬ 
able  for  some  IT  organizations.  “I’ve 
seen  companies  that  spend  99%  of 
their  IT  budget  purely  on  operating 
and  maintaining  their  installed  base. 

I  would  never  tell  those  companies  to 
allow  any  skunk  works,”  says  Kaplan. 
But  he  says  businesses  with  large  IT 
budgets  and  discretionary  spending 
should  have  some  skunk  works.  “But 
they  should  work  on  the  most  strategic 
issues  and  on  solutions  where  the  pay¬ 
off  is  in  the  tens  to  hundreds  [of]  times 
the  cost  of  the  investment,”  he  says. 

Dallas  says  he  has  used  dollars  on 
hand  for  infrastructure  investment  or 
some  of  the  contingency  funds  ear¬ 
marked  for  large  projects. 

In  the  end,  there  is  no  guarantee  that 
a  skunk  works  will  deliver  a  break¬ 
through.  Kaplan  advises  CIOs  to  view 
skunk  works  as  a  gamble  by  telling 
themselves,  “If  nothing  comes  of  it, 
well,  nothing  ventured  and  nothing 
gained.”  He  adds,  “If  you  can’t  say  that, 
then  you  shouldn’t  be  doing  it.” » 


Artunian  is  a  freelance  writer  in 
Newport  Beach,  Calif.  Contact  her 
at  jartunian@sbcglobal.net. 
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Brinana  i  By  Thomas  Hofl 

HOMEGROWN 


To  Market 


Procter  &  Gambles  initiative  to  sell  some  of 
its  in-house  IT  is  full  of  challenges,  but  the 
returns  are  more  than  monetary. 


ITH  NEARLY  300  brand- 
name  products  sold  around 
the  world,  The  Procter  & 
Gamble  Co.  is  renowned  for 
its  innovation.  Throughout  its  169-year 
history,  the  consumer  products  giant 
has  applied  its  technological  know-how 
to  everything  from  superabsorbent  dia¬ 
pers  to  structured  paper  towels. 

Now  P&G  is  applying  its  innovation 
prowess  —  and  marketing  muscle  —  to 
IT.  By  marketing  some  of  its  internally 
developed  IT,  P&G  is  gaining  addi¬ 
tional  revenue  while  improving  its  own 
in-house  IT  products  and  services. 

The  roots  of  P&G’s  IT  commercial¬ 
ization  efforts  go  back  to  the  late  1990s, 
when  former  Chairman,  CEO  and 
President  Durk  A.  Jager  began  preach¬ 
ing  about  innovation.  His  plans,  which 
have  since  been  continued  by  current 
CEO  A.G.  Lafley,  included  adopting 
great  ideas  from  P&G’s  business  part¬ 
ners  and  remarketing  some  of  its  own 
intellectual  property  (IP). 

Case  in  point:  P&G  has  remarketed 
Power  Factor,  a  set  of  technologies  and 
work  processes  designed  to  improve  an 
organization’s  manufacturing  through¬ 
put.  P&G  has  been  using  these  systems 
internally  since  the  early  1990s  and  be¬ 
gan  licensing  them  to  other  companies 
in  2000,  says  Jack  J.  Ridge,  director  of 
external  business  development  (EBD). 

In  1999,  P&G  created  the  EBD  group 
to  identify  internally  developed  IP, 
such  as  technologies  and  business  proc¬ 
esses,  that  could  be  repackaged  and 
licensed  to  other  companies. 

P&G  isn’t  the  first  company  that 
has  successfully  marketed  some  of  its 
internally  developed  IT.  For  example, 
The  Men’s  Wearhouse  Inc.  in  Houston 
developed  software  several  years  ago 
that  stores  a  customer’s  sizes  to  make 
it  easier  for  spouses  to  shop  for  their 


The  Procter  &  Gamble  Co. 

LOCATION:  Cincinnati 

BUSINESS:  Consumer  products  maker 
with  nearly  300  products  sold  in  140 
countries 

2005  REVENUE:  $33.13  billion 
2005  EARNINGS:  $4,58  billion 


husbands,  says  Cathy  Hotka,  senior 
vice  president  of  technology  and  busi¬ 
ness  development  at  the  Retail  Indus¬ 
try  Leaders  Association  in  Arlington, 
Va.  The  software  was  eventually  sold 
to  Retek  Inc.,  which  has  since  been  ac¬ 
quired  by  Oracle  Corp. 

While  other  companies  have  sold 
homegrown  technologies  and  IT  capa¬ 
bilities,  most  have  been  one-off  deals, 
notes  Howard  Rubin,  an  analyst  at 
Gartner  Inc.  “That’s  a  tough  business 
model  for  most  IT  organizations  to 
sustain,”  he  adds. 

In  contrast,  in  February  2005,  P&G 
dedicated  a  division  to  focusing  exclu¬ 
sively  on  reselling  internally  developed 
IT-related  IP.  It’s  a  one-person  shop  run 
by  Bill  Metz,  a  15-year  IT  veteran  of  the 
company.  Metz  is  constantly  beating 
the  bushes  looking  for  technologies 
P&G  can  remarket  and  customers  who 
might  be  interested  in  them.  But  he’s 
not  entirely  alone.  As  manager  of  IT 
EBD,  he  works  closely  with  P&G’s  legal 
and  public  relations  staffs. 

The  technologies  in  question  are 
not  necessarily  what  one  would  as¬ 
sociate  with  a  consumer  packaged 
goods  manufacturer.  For  instance,  a 
colleague  at  P&G’s  IT  organization  in 
Spain  recently  contacted  Metz  about 
a  PC -based  diagnostic  system  that  the 
company  developed.  Physicians  can 
use  the  software  to  quickly  diagnose 


osteoporosis  by  viewing  X-rays  on  a 
computer  screen.  As  part  of  P&G’s 
efforts  to  establish  business  relation¬ 
ships  with  health  care  providers,  the 
system  is  currently  being  used  for  free 
by  a  group  of  doctors  at  230  hospitals 
in  Europe,  says  Edwin  Erckens,  an  IT 
manager  for  P&G’s  pharmaceutical 
business  in  Barcelona.  Metz  is  explor¬ 
ing  opportunities  to  distribute  the 
technology  to  doctors  worldwide. 

Robert  Scott,  vice  president  of  inno¬ 
vation  and  architecture  in  P&G’s  global 
business  services  division,  declined  to 
share  the  dollar  amount  of  the  IT  EBD 
group’s  first-year  revenue,  saying  only 
that  its  targets  are  modest,  since  it’s 
just  beginning  to  mature. 

The  Feedback  Bonus 

By  licensing  technologies  to  other 
companies,  P&G  also  gets  a  nonmon¬ 
etary  return,  says  Mike  Hock,  associate 
director  of  the  EBD  group.  It’s  able  to 
apply  customer  recommendations  to 
improve  systems  it  runs  in-house. 

For  example,  in  mid-2004,  one  of 
P&G’s  Power  Factor  customers,  a 
soft-drink  maker,  complained  that  the 
system  was  too  complicated  to  use, 
says  Hock.  So  P&G  spent  the  next  six 
months  simplifying  how  the  individual 
modules  work  and  interface  with  one 
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another.  Those  changes  benefited  not 
only  the  soft-drink  maker  and  other 
customers  that  license  the  technology, 
but  also  P&G’s  internal  manufacturing 
groups,  which  use  it  as  well. 

Allowing  customers  to  “commer¬ 
cially  harden”  a  P&G  system  or  busi¬ 
ness  process  “is  a  great  way  of  feeding 
your  innovation  process,”  says  Hock. 

To  make  sure  this  happens,  Metz  meets 
regularly  with  P&G’s  IT  customer  ad¬ 
visory  boards  to  solicit  their  input  on 
potential  product  improvements. 

Companies  that  have  successfully 
marketed  some  of  their  IT,  such  as 
Honeywell  International  Inc.,  typically 
have  leaders  with  a  strong  mix  of  IT 
and  business  skills  that  have  helped 
them  to  make  the  transition  from  IT  to 
a  revenue-generating  entity,  says  Navi 
Radjou,  an  analyst  at  Forrester  Re¬ 
search  Inc.  in  Cambridge,  Mass. 

Metz  has  some  business  experience 
of  his  own.  In  the  late  1990s,  for  ex¬ 
ample,  he  worked  with  developers  in 
India  to  set  up  Web  development  work 
for  P&G.  That  helped  kick-start  his  role 
with  EBD. 

Still,  he  acknowledges  that  he  faces 
some  formidable  challenges.  These 
include  conveying  the  commercial  vi¬ 
ability  of  some  of  P&G’s  technologies 
and  work  processes  to  internal  IT  staff¬ 
ers,  some  of  whom  see  marketing  IT  as 
“a  foreign  notion,”  he  says. 

One  of  the  toughest  lessons  that 
Metz  has  had  to  learn  is  that  not  every 
project  he’s  involved  in  will  turn  into 
a  money-maker.  “Some  lines  get  bites, 
and  some  don’t.  It’s  the  nature  of  the 
work,”  Metz  says. 

P&G  is  admittedly  learning  along 
the  way  as  its  IT  EBD  group  matures. 
Challenges  include  striking  a  balance 
between  the  time  needed  to  commer¬ 
cialize  and  resell  its  homegrown  IT 
and  the  burden  that  places  on  develop¬ 
ers  and  IT  managers. 

“The  biggest  challenge  is  how  [to 
market]  our  IP  without  dragging  down 
people  from  their  operational  duties,” 
says  Scott.  “I’m  not  sure  we’ve  worked 
out  the  balance.” 

Reselling  IP  isn’t  for  everyone,  says 
Radjou,  partly  because  of  a  cultural 
reluctance  to  let  go  of  something  that 
gives  you  a  perceived  advantage.  “IT  is 
not  something  that  most  companies  are 
easily  willing  to  share,”  he  adds. 

But  Metz  and  his  colleagues  are 
bullish  about  their  future  and  proud  of 
how  they  have  positioned  themselves 
against  traditional  IT  vendors.  “The 
kinds  of  solutions  we  use  here  are 
leading-edge,”  says  Metz.  “You’re  not 
going  to  get  a  1.0  solution  that  hasn’t 
been  field-tested.”  » 
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Talent  Management 

March  21-22,  New  York 
Sponsor:  The  Conference  Board 
Topics  at  Integrating  Talent  and 
Business  Strategies  include  how 
to  become  a  magnet  for  talent, 
rotational  assignments,  why  great 
succession  management  systems 
fail,  human  capital  metrics  and  work¬ 
force  planning. 

www.conference-board.org/ 

conferences 


Content 

Management 

April  3-5,  San  Francisco 
Sponsor:  The  Center  for  Information 
Development  Management 
Topics  at  Content  Management  Strat¬ 
egies  2006  include  rolling  out  an  en¬ 
terprise  content  management  system 
in  a  global  environment,  strategizing 
for  reusable  content,  implementing 
Autodesk’s  Content  and  Globalization 
System,  workflow  possibilities  with 
content  management,  choosing  a 
vendor,  bridging  the  process  divide 
between  Web  sites  vs.  Web  content, 
and  five  keys  to  a  workable  CMS. 
www.cm-strategies.com 


IT  Innovation 

April  3-6,  Las  Vegas 

Sponsor:  Forrester  Research  Inc. 
GigaWorld:  Achieving  Business  Flex¬ 
ibility  Through  IT  Innovation  includes 
tracks  on  the  future  of  IT,  how  to 
implement  digital  business  architec¬ 
ture,  the  information  workplace,  IT 
management,  computing  systems, 
application  development  and  infra¬ 
structure,  and  communication  trans¬ 
formation  and  security. 
www.forrester.com/itforum2006 


Service-Oriented 

Architecture 

April  19-20,  Chicago 
Sponsor:  Brainstorm  Group  Inc. 
Topics  at  Strategies  for  Developing, 
Managing  and  Governing  Service- 
Oriented  Architectures  include  adop 
tion  rates,  case  studies  and  lessons 
learned:  12  steps  to  SOA;  patterns 
of  SOA:  aligning  existing  enterprise 
architectures  with  business  require¬ 
ments:  the  macro  and  micro  view; 
and  making  sense  of  the  plethora 
of  products  available  for  SOA  infra¬ 
structures. 

www.brainstorm-group.com 


PAUL  GLEN 


What’s  an  MBA 
Good  for — Really? 


IT  SEEMS  that  I  get  more  questions  about  the 

MBA  degree  than  any  other  career  development 
topic.  It  appears  to  hold  a  uniquely  prominent 
space  in  the  minds  of  ambitious  managers  and 
would-be  managers  among  the  IT  ranks. 

But  the  questions  are  usually  of  a  rather  black-and- 
white  nature:  Should  I  get  one?  Will  it  be  good  for  my 
career?  Will  it  be  worth  the  money?  Is  it  worth  the  time 
away  from  the  workplace  to  do  it  full  time?  Are  part- 
time  MBA  programs  too  hard  to  do  while  working  full 
time?  Is  it  worth  going  back  for  an  executive  MBA  once 


I’m  already  in  manage¬ 
ment? 

What  surprises  me  most 
of  all  is  that  among  all  the 
questions,  few  are  about 
what  an  MBA  is  and  what 
it  isn’t.  Most  of  the  discus¬ 
sion  centers  on  the  cre¬ 
dential  and  the  cost  rather 
than  the  content.  Few  ask 
about  what  you  learn  or 
what  it  prepares  you  to  do 
effectively.  For  something 
that  can  cost  you  as  much 
as  a  house  (if  you  include 
lost  earnings),  there  is  a 
surprising  lack  of  consum¬ 
er  interest  in  the  actual 
product. 

But  it’s  not  just  the  consumers  of  the 
degree  who  seem  indifferent  to  the 
content  of  the  programs.  Hiring  man¬ 
agers  looking  for  the  credential  on  re¬ 
sumes  often  seem  uninterested  as  well. 
They  just  seem  to  figure  that  people 
with  name-brand  MBAs  must  be  pre¬ 
pared  for  leadership  positions. 

But  the  MBA  mystique  is  being 
questioned  in  certain  quarters.  Among 
some  of  the  most  prominent  business- 
school  professors  in  the  world,  an  open 
debate  has  erupted  about  the  value  of 
the  MBA  degree. 

Before  I  upset  too  many  of  you,  I 
should  mention  that  I  am  not  anti- 


MBA.  I  have  one  myself 
from  Northwestern’s 
Kellogg  School  and  have 
taught  in  MBA  programs 
at  two  universities,  most 
recently  the  University  of 
Southern  California’s  Mar¬ 
shall  School.  But  I  think 
that  the  critics  have  some 
important  points  to  make 
—  ones  that  we  in  the  prac¬ 
titioner  community  should 
note  carefully. 

Here  are  a  few  of  the 
most  important  things  the 
critics  of  this  MBA  infatua¬ 
tion  have  pointed  out: 

MBA  programs  train 
students  in  business,  not 
management  or  leadership.  Among  those 
with  the  harshest  words  for  MBA  pro¬ 
grams  is  McGill  University  professor 
Henry  Mintzberg,  one  of  the  most  cel¬ 
ebrated  thinkers  and  writers  on  busi¬ 
ness  today.  His  perspective:  “It  is  time 
to  recognize  conventional  MBA  pro¬ 
grams  for  what  they  are  —  or  else  to 
close  them  down.  They  are  specialized 
training  in  the  functions  of  business, 
not  general  education  in  the  practice  of 
managing.” 

Most  programs  are  structured 
around  the  functions  of  business,  such 
as  finance,  marketing,  strategy,  human 
resource  management  and  general 


PAUL  GLEN  helps  technical 
organizations  to  grow  better 
leaders,  and  managers  to 
perform  at  their  best.  He  is 
the  author  of  the  award¬ 
winning  bormead/ng  Geeks. 
Contact  him  at 
info@paulglen.com. 


management.  And  the  courses  empha¬ 
size  technical  understanding  of  these 
functional  areas.  However,  an  under¬ 
standing  of  the  general  architecture  of 
a  business  is  not  sufficient  preparation 
to  lead  the  people  who  inhabit  it. 

MBA  programs  overemphasize  analyti¬ 
cal  skills.  Many  of  the  criticisms  of  the 
MBA  are  not  new.  Writing  in  the  Har¬ 
vard  Business  Review  in  1971,  J.  Sterling 
Livingston,  a  Harvard  Business  School 
professor,  offered  this  observation: 
“Formal  management  education  pro¬ 
grams  typically  emphasize  the  devel¬ 
opment  of  problem  solving  and  deci¬ 
sion  making  skills,  for  instance,  but 
give  little  attention  to  the  development 
of  skills  required  to  find  the  problems 
that  need  to  be  solved,  to  plan  for  the 
attainment  of  desired  results  or  to 
carry  out  operating  plans  once  they 
are  made.” 

MBA  programs  don’t  prepare  students 
for  the  human  element  of  management.  In 

overemphasizing  analytical  skills,  they 
give  short  shrift  to  the  softer  skills 
that  are  more  critical  to  the  practice  of 
management. 

Edgar  Schein,  who  is  now  an  emeri¬ 
tus  professor  at  the  MIT  Sloan  School 
of  Management,  conducted  interviews 
with  alumni  of  the  program  and  noted 
that  “at  an  emotional  level,  ex-students 
resent  the  human  emotions  that  make 
a  company  untidy. . . .  [Few]  can  ac¬ 
cept  without  pain  the  reality  of  the 
organization’s  human  side.  Most  try  to 
wish  it  away,  rather  than  work  in  and 
around  it.” 

So  do  you  need  an  MBA?  To  answer 
that  question  cogently  for  yourself  or 
others,  I  think  it’s  time  to  start  think¬ 
ing  about  the  value  of  the  education  in 
addition  to  the  value  of  the  credential. 
It  has  its  place  but  isn’t  the  end-all  in 
pursuit  of  a  fulfilling  and  lucrative  ca¬ 
reer.  » 


WANT  OUR  OPINION? 

OFor  more  columns  and  links  to  our  archives  go  to: 
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You  can't  afford  to  sit  around  and  wait  for  the  next  attack,  and  neither  can  we. 
Websense®  Security  Labs”  scans  over  450  million  websites  a  week,  discovering 
spyware,  viruses  and  other  web-based  threats  before  they  get  to  you.  Get  proactive. 


www.websense.com/security 
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- a  new  era  of  VoIP  analysis - 

You  convinced  management  to  deploy  VoIP. 
Now  ensure  that  it  will  run  smoothly. 

Rely  on  Network  Instruments'  Observer  to  help  keep 
VoIP  communications  running  at  optimal  performance. 


Learn  more. 

1-800-566-0919 

networkinstruments.com/voip 
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indexer 


“Bottom  line:  dtSearch  manages  a  terabyte  of  text  in  a  single 
index  and  returns  results  in  less  than  a  second”  —  InfoWorld 


r 


For  hundreds  more  reviews  and  developer 
case  studies,  see  www.dtsearch.com 

Contact  dtSearch  for  fully-functionat 
evaluations 


♦  over  two  dozen  indexed,  unindexed,  fielded  data 
and  full-text  search  options 


♦  highlights  hits  in  HTML,  XML  and  PDF,  while 
displaying  [inis,  formatting  and  ililfeli'MJ- 

♦  converts  other  file  types  (word  processor,  database, 
spreadsheet,  email  &  attachments,  ZIP,  Unicode, 
etc.)  to  HTML  for  display  with  highlighted  hits 

♦  Spider  supports  static  and  dynamic  Web  content, 
with  WYSWYG  hit-highlighting 

♦  optional  API  for  C++,  .NET,  Java,  SQL,  etc. 

Ask  about  new  .NET  Spider  API 


dtSearch  vs.  the 
competition: 
“dtSearch  easily 
overpowered  the 
document  indexing 
and  searching 
abilities  of  other 
solutions, 
especially  against 
large  volumes  of 
documents” 


“The  most  powerful 
document  search  tool  on 
the  market” 

—  Wired  Magazine 

“dtSearch ...  leads  the 
market” 

—  Network  Computing 
“Blindingly  fast” 

—  Computer  Forensics: 
Incident  Response  essentials 


Reliability: 
“dtSearch  got  the 
highest  marks 
from  our  systems 
engineering  folks 
that  I've  ever 
heard  of” 

Results:  “customer 
response  has  been 
phenomenal” 


“A  powerful  arsenal  of 
search  tools” 

—  The  New  York  Times 

“Super  fast,  super¬ 
reliable” 

—  The  Wall  Street  Journal 

“Covers  all  data  sources 
...  powerful  Web-based 

engines”  —  eWEEK 

“Searches  at  blazing 
speeds” 


—  Computer  Reseller  News 


The  Smart  Choice  for  Text  Retrieval®  since  1 991  Test  Center 


The  Computerworld  Marketplace  advertising  sectic 
reaches  more  than  1.8  million  IT  decision  makers  e1 
week.  Marketplace  advertising  helps  Comput^sror] 
readers  compare  prices,  search  for  the  best  values, 
locate  new  suppliers  Ind  find  new  products  and  sei 
for  their  IT  needs.  IS 
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ATTENTION: 

Law  Firms 
IT  Consultants 
Staffing 
Agencies 

Place 
your 
Labor 

Certification 
Ads  here! 


Are  you  frequently 
placing  legal  or 
immigration 
advertisements? 

Let  us  help  you 
put  together  a  cost 
effective  program 
that  will  make  this 
time-consuming  task 
a  little  easier. 
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Acme  Packet,  Inc.  is  seeking  a 

MANAGER-CORPORATE 
SYSTEMS  ENGINEERING 

at  its  Burlington  MA  location.  Lead 
Corporate  Systems  Engineering  team 
in  providing  internal  escalation  for  all 
regional  System  Engineering  teams  in 
Central/Latin  America,  North  America, 
Asia/Pacific  and  Europe,  Middle  East 
and  Africa.  Plan  schedule  &  assign  all 
Corporate  System  Engineering  tasks, 
including  interoperability  testing  with 
strategic  third  party  vendors  &  Sys¬ 
tems  Integrators,  producing  Best  Cur¬ 
rent  Practices  documents  and  provid¬ 
ing  Systems  Engineering  resources  to 
customers  and  channel  partners  dur¬ 
ing  product  installations.  Minimum 
Requirements:  Master's  degree  (or 
equivalent)  in  Computer  Science  OR 
Employer  will  accept  Bachelor's  de¬ 
gree  (or  equivalent)  in  Computer  Sci¬ 
ence  plus  five  years  of  progressively 
more  responsible  work  in  the  field; 
AND  three  years  VoIP  engineering  ex¬ 
perience.  Experience  must  include: 
System  implementation,  deployment 
&  support  for  customers;  Data  net¬ 
working  &  telephony  environments, 
specifically  Next  Generation  IP  ser¬ 
vices;  LANA/VAN  data  architectures  & 
routing  protocols;  and  IP  telephony  ar¬ 
chitectures  &  VoIP  protocols 
(SIP, H. 323,  MGCP,  RTP/RTCP),  &  se¬ 
curity  &  QoS,  including  MPLS/ 
DiffServ  Please  mail  resumes/cover 
letters  to:  Andre  Normand,  Acme 
Packet,  Inc. 71  Third  Avenue, 
Burlington  MA  01 803 


Acme  Packet,  Inc.  is  seeking  a 

PRODUCT  MANAGER 

at  its  Burlington  MA  location.  Define  mar¬ 
ket  and  customer  requirements  for  cur¬ 
rent  and  future  products.  Write  and  drive 
through  the  Engineering  organization 
product  requirements  documents 
(PRDs).  Work  closely  with  Engineering 
to  develop,  implement  and  maintain  prod¬ 
uct  release  plans.  Coordinate  with  Sales 
and  Systems  Engineering  teams  cus¬ 
tomer  lab  testing/trials/filed  deployments. 
Produce  sales  and  promotional  tools  and 
conduct  sales  training  on  new  features 
and  product  functionality.  Develop  and 
maintain  technical  expertise  on  Company 
products/technologies.  Travel  to  cus¬ 
tomer  and  strategic  partner  locations 
worldwide  to  gather  relevant  strategic  and 
tactical  requirements  in  managing  prod¬ 
uct  life  cycle  and  product  roadmap.  Mini¬ 
mum  Requirements:  Master’s  degree  (or 
equivalent)  in  Electrical  Engineering  or 
Telecommunications  Engineering  plus 
two  years  experience  as  a  Systems  Engi¬ 
neer  or  Product  (Line)  Manager.  Experi¬ 
ence  must  include:  Data  networking  and 
Internet  protocol  based  telephony  envi¬ 
ronments  (Next  Generation,  Packet  Cable 
&  Softswitch);  VoIP  signaling  protocols 
(SIP,  H.248,  H.323,  MGCP);  and  standard 
Bodies  participation  (ITU-T).  Please  mail 
resumes/cover  letters  to:Andre  Normand, 
Acme  Packet,  Inc. ,71  Third  Avenue, 
Burlington  MA  01803 


Sales  Engineer  - 

Technical  services  to  users 
of  metrology  instruments  to 
ensure  company's  sales. 
Duties:  material  modeling, 
configuring  instruments, 
performance  measurement 
and  analysis,  and  training  in 
the  operation  of  instruments. 
Refer  to  Job#  APP-CA  and 
reply  to  gbrake@soprainc.com 
or  to  SOPRA,  Inc.,  47 
Queensland  Rd.,  N.  Billerica, 
MA  01862.  Job  in  Santa  Clara 
county. 


IT  Opportunities 

Due  to  our  rapid  growth,  we  have  the  following  positions  available: 

Programmer  Analyst:  Analyze,  design,  develop,  code,  test  and  maintain 
database  management  systems.  Must  have  a  Bachelors  degree  in  Computer 
Science,  Engineering  or  related  +  3  years  experience  and  the  ability  to  use 
Mainframe,  DBA,  AS400  and  Client-Server  Tools. 

Project  Managers/Leaders:  Lead  a  team  of  programmer  analysts  &  data 
base  administrators  on  development  and  maintenance  of  hardware  and  software 
applications  as  well  as  be  responsible  for  project  planning  and  quality  assurance. 
Must  have  a  Bachelors  degree  in  Computer  Science,  Engineering  or  related 
+  5  years  experience  and  the  ability  to  use  Mainframe.  DBA,  AS400  and  Client- 
Server  Tools. 

Business  Development  Managers/Directors:  Manage  sales  activities 
and  achieve  sales  quota  for  assigned  territory.  Help  Syntel’s  sales  leadership  in 
planning  and  rolling  out  an  inside  sales  strategy.  Must  have  a  Bachelors  degree 
in  Computer  Science,  Business  or  related  +  3  years  experience. 


All  positions  are  located  throughout  the  U.S.  and  travel  is  usually  required. 

Above  positions  commonly  require  any  of  the  following  skill  sets: 


Mainframe:  IMS  DM/DC  OR  DB2,  MVS/ESA,  COBOL,  CICS,  Focus,  IDMS  or 
SAS. 

DBA:  ORACLE  OR  SYBASE  DB2,  UDB 

Client-Server/WEB:  Ab-initio  •  Oracle  Applications  &  Tools  •  Websphere 

•  Lotus  Notes  Developer  •  VB,  Com/Dcom  ,  Active  X,  •  Web  Architects  •  UNIX, 
C,  C++,  Visual  C++,  C#.NET,  ASP.NET  .VB.NET  •  SAP/R3,  ABAP/4  or  FICO  or 
MM  &  SD  •  IEF  •  Datawarehousing  and  ETL  tools  •  WiNT  •  Oracle  Developer 
or  Designer  2000  •  JAVA,  HTML,  J2EE,  EJB  •  RDBMS  •  PeopleSoft 

•  PowerBuilder  •  Web  Commerce 

AS400:  RPG,  ILE,  Coolplex 


Please  forward  your  cover  letter  and  resume 


to:  Syntel,  Attn:  Recruitment  Manager 
525  E.  Big  Beaver,  Ste.  300 
Troy,  Ml  48083 

E-mail:  syntel  usads@syntelinc.com  EOE 
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uifww.syiiteliiic.com 


Lead  IT  Analyst  Accordant  Health 
Services  has  opening  for  Lead  IT 
Analyst  to  code,  test,  &  integrate 
software  enhancements  to  corpo¬ 
rate  systems  &  provide  support  of 
corporate  intemet/intranet  sites, 
using  object  onented  techniques. 
Candidates  for  this  position  must 
possess  Object  Oriented  experi¬ 
ence  &  must  have  at  least  3  of  the 
following  skills:  (  NET,  ASP.NET), 
VB,  C#,  C++.  JAVA,  Visual  Age, 
WebSphere,  Visual  Studio,  Web 
Development  (ASP.  JSP,  JavaScript), 
XML,  Mainframe  (OS390,  Natural 
/DB2,  JCL),  a  Master’s  Degree  in 
Computer  Science  or  BS  +  5  yrs 
business  programmming  exp. 
Foreign  equivalent  acceptable. 
Provide  resume:  Accordant  Health 
Services,  ATTN:  IS  Director,  4900 
Koger  Blvd,  Suite  300,  Greensboro, 
NC  27407. 

Synerzy  Software  Solutions  Inc., 
needs  Identity  Management 
expert  w/exp  in  CA  Siteminder. 
Sunone  Access  Manager, 
Sunone  Directory  Server,  Novell 
E-directory,  Shell  scripting,  Bea 
Weblogic  ,IBM  Websphere  6.0, 
MO  Series  ,  EJB  Security  (JAAC), 
Java,  Crystal  Report  Server  and 
through  knowledge  of  adminis¬ 
tering  various  web  servers 
across  different  environments  is 
a  must.  Experience  in  establishing 
single  sign  on  with  third  party 
vendors  is  a  major  plus.  For 
some  positions  we  also  accept 
any  suitable  comb,  of  education 
&  exp.  Frequent  travel  and/ 
or  relocation  required.  Send 
resume  &  salary  req.  to  HR 
Manager,  Synerzy  Software 
Solutions  Inc,  1  Austin  Ave,  2nd 
Floor, Iselin.NJ  08830 

Sr.Systems  Analyst  to  design, 
implement  and  supervise  design¬ 
ing  and  implementation  of  web 
based  applications  for  the  finance 
industry.  Shall  design  applica¬ 
tions  interacting  with  Sybase  and 
Oracle  applications  on  UNIX, 
Solaris  and  Linux  platforms  using 
Perl,  CGI  Protocol,  HTTP,  HTML 
&  Perl  DBI  interface  to  databas¬ 
es.  Shall  use  Java,  C,  C++, 
Sybase  and  Oracle.  Job  location 
Piscataway,  NJ.  Travel  to  client 
locations  must.  Req.  4  yrs  of  col¬ 
lege  education  equivalent  to  a 
Degree  in  Computer  Sc.  Plus  5 
yrs  of  experience  as  an  I.T.  pro¬ 
fessional.  Must  have  3  yrs  exp  in 
all  above  skills  and  tools.  Mail 
resume  to:  Job  NO.  LS06-01. 
Logistic  Solutions,  Inc.  200 
Centennial  Avenue,  Suite  209, 
Piscataway,  NJ  08854. 

IP  Networking/Telecommunications 
Manager  wanted  by  CLAdirect,  Inc. 
to  manage,  design  &  consult  IP 

network  &  telecommunication 

infrastructure.  Direct  daily  opertns. 
of  dept.  Research  &  supervise 
implementation  of  new  technology. 

Must  be  versed  in  WAN,  LAN, 

Network  connectvty  &  Security, 
VoIP  Must  have  min.  4  yrs  of  PBX, 

Computer  &  IT  exp.  Competitive 
salary  offered.  Mail  resume  to: 

Carlos  Gonzalez,  HR,  at  8600  NW 

17  St.,  Ste.  140,  Miami,  FL  33128. 

Business  Analyst  w/Bachelors  in 
Buss  Admin  or  Comp  Scie  &  1  yr 
exp  to  write  bus  plans,  prep 
prsentations,  analyze  buss  process 
&  strategic  profile  of  the  co  using 
MS  Project,  Excel,  Access,  DBMS 
&  Power  Point.  Study  current  buss 
process  &  systms  to  make  prpsls, 
process  consulting  &  s/ware 
dvlpmnt  in  order  to  streamline 
processes,  reduce  costs  &  increase 
effcncy.  Reset  co's  strategic  drctn 
by  assessing  the  co's  mrkt 
pstnng,  orgnztn  &  key  processes. 
Design  &  implmnt  high  quality 
documentation  (version  control). 
Mail  res  to:  Galerie  Shabab  New 
York  Inc.,  112  Madison  Ave,  NY, 
NY  10016.  Job  ioc:  NYC 

Programmer  Analyst: 

Analyze,  architect,  develop, 

integrate,  &  test  multi-tier, 

multi-os  Enterprise  Applications. 

System  Integration  & 

Implementation  using  VC++, 

HL7,  SystemZ,  XML  &  Oracle. 

Req.  Bachelor's  in  Comp. 

Science  or  Engg.  &  2  yrs  of  exp. 

Send  resume  to  HR.  eTransX  Inc. 

5214  Maryland  Way,  Ste  100, 

Brentwood.  TN  37027 
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IT  PROFESSIONALS  AND  MANAGERS  NEEDED 

MindTree  Consulting,  an  established  and  expanding  IT  consulting  company 
with  headquarters  in  Somerset,  NJ  is  searching  for  qualified  IT 
Professionals  (i.e.,  Software  Engineers,  Programmer/Analysts,  Systems 
Analysts);  Information  Systems  and  Project  Managers;  and  business 
development  managers  in  its  growing  team. 

Technical  positions  require  a  bachelor's  degree  in  computer  science, 
engineering  or  a  related  field  and  relevant  industry  experience.  We 
particularly  seek  applicants  with  experience  in  areas  such  as  SAP,  Oracle, 
Sybase,  MS  SQL  Server,  Java,  J2EE,  XML,  HTML.  DB2,  COBOL,  Linux, 
Net  Technologies  and  WebServices. 

For  our  Information  Systems  and  Project  Manager  positions  we  prefer  an 
MS  degree  in  related  fields  such  as  computer  science  or  engineering  and 
relevant  industry  experience.  We  will  consider  applicants  with  a  relevant 
bachelor's  degree  and  significant  industry  experience  for  these  positions. 

Our  business  development  managers'  responsibilities  include  developing 
and  managing  all  business  development  initiatives  for  a  region  in  the 
United  States.  Qualified  applicants  will  have  a  technical  and/or  business 
/marketing  degree  (master's  preferred)  and  relevant  industry  experience. 

Positions  may  require  relocation  to  various  client  sites  throughout  the 
United  States.  Qualified  applicants  submit  resumes  to  HR  Department,  The 
Tower,  270  Davidson  Avenue,  Suite  305,  Somerset,  NJ  08873 


Programmer  Analyst 

(multiple  worksites).  Analyze, 
design,  develop,  test,  deploy 
software  using  C++,  Visual  Basic 
5. 0/6.0,  InterDev.,  SQL  Server 
2000,  XML,  XSL,  IIS,  DTS, 
Com/Dcom,  MTS,  Com+, 
S.O.A.P.,  Winsock,  ADD/RDS, 
Web  Services,  Cimplicty,  PE/ME, 
Symbol  Active  Scan,  Visio, 
Roadnet,  PVCS,  Tracker,  Crystal 
Reports,  iBatch,  RsBatch, 
MSMQ,  ADSI,  Embedded  Visual 
Basic,  Install  Shield.  B.S.  or 
foreign  degree  equiv.  in 
Engineering  Field  or  Comp.  Sc.  + 
2yrs  programming  analysis  exp. 
in  C++,  Visual  Basic,  Cimplicty, 
PE/ME,  Symbol  Active  Scan, 
iBatch,  RsBatch,  MSMQ,  ADSI, 
Embedded  Visual  Basic. 
Extensive  travel.  Must  have 
perm,  work  auth.  to  work  in  U.S. 
Send  resume  to  Intelliquest 
Systems  Inc.,  301  Grant  St,  Suite 
4300,  Pittsburgh,  PA  15219. 


Acme  Packet,  Inc.  is  seeking  a 

SENIOR  TECHNICAL 
SUPPORT  ENGINEER 

at  its  Burlington  MA  location.  Ana¬ 
lyze  customer  problem  reports  & 
replicate  customer  environment  to 
reproduce  customer  problems  in 
lab  environment.  Troubleshoot  & 
successfully  resolve  customer 
problems  by  performing  open  de¬ 
fect  analysis  &  apply  debugging 
techniques.  Escalate  issues  into 
Engineering  organization  as  re¬ 
quired.  Manage  Soffront  database 
by  openings  tracking  all  trouble 
tickets,  Return  Material  Authoriza¬ 
tions  (RMA’s),  account  informa¬ 
tion,  &  Maintenance  Plans.  Work 
with  Soffront  vendor  on  profes¬ 
sional/enhancement  services. 
Minimum  requirements;  Master’s 
Degree  (or  equivalent)  in  Engineer¬ 
ing  or  Information  Technology, 
plus  four  years  network  engineer¬ 
ing  experience  in  VoIP  industry.  Ex¬ 
perience  must  include:  Signaling 
protocols  (H.323,  SIP,  DTMF,  ISDN 
&  SS7);  IP  protocols  (TCP/IP,  UDP/ 
IP.  ARP  &  NAT);  Protocols  analyzer 
tools  (Spectra,  Inet,  Ethereal, 
Sniffer  Distributed);  Security  tools 
(VPN,  PIX);  and  advanced  trouble¬ 
shooting  with  VoIP  softswitches, 
gateways,  gatekeepers  &  Session 
Border  Controllers.  Please  mail  re¬ 
sumes/cover  letters  to:  Andre 
Normand,  Acme  Packet,  Inc., 
71  Third  Avenue,  Burlington  MA 
01803 


Sr.  Specialist,  eCRF  Development 
(Computer  &  IS  Manager)  sought 
by  Novartis  Pharmaceuticals 
Corporation  for  East  Hanover,  NJ 
office.  Must  possess  Master’s  degree 
or  foreign  academic/experiential 
equivalent  in  Computer  Science 
and  2  years  experience  in  clinical 
database  design  and  administra¬ 
tion  in  the  pharmaceutical  industry, 
including  SAS,  Oracle  8.0  (SQL, 
PL/SQL),  Documentum  and 
Clintrial  CT4.  Respond  to:  Arlene 
O'Rourke,  Human  Resources 
Dept.,  Requisition  #34159, 
One  Health  Plaza,  B104/1G38, 
East  Hanover,  NJ  07936. 
Novartis  is  an  EOE  Employer. 


Synerzy  Software  Solutions  Inc., 
needs  Sr  Software  Engr  w/exp  in 
CA  Siteminder,  CA  Identityminder, 
Red  Hat  Linux,  Windows  2003, 
Shell  scripting,  IBM  Websphere 
5.1,  Web  Server(Apache,  SUN, 
IIS)  Administration  .SunOne 
LDAP,  AD,  EJB  Security  (JAAS), 
Java,  Crystal  Report  Server, Web 
Focus,  exp.  With  ADAM  (Active 
Directory  Application  Mode)  is 
compulsory.  Knowledge  in  Firewall 
Technologies  .Networking  skills  is 
a  Plus.  Travel  and/or  relocation 
required.  Send  resume  &  salary  ! 
req.  to  HR  Manager,  Synerzy 
Software  Solutions  inc,  1  Austin 
Ave,  2nd  Floor,  Iselin,  NJ  08830 


Systems  Analysts  -  act 
as  an  interna!  consultant 
to  plan  and  direct  the 
analysis  of  functional 
capacity  and  complex 
business  IT  problems  to 
be  solved  with  computer 
systems.  Refer  to  Job 
code  BSA,  and  reply  to 
jobs@avocausa.com  or  to 
Avoca  LLC,  555  Howard 
St.,  2d  floor,  SF,  CA941Q5. 

Lamons  Gasket  Co.  seeks 
MIS  Manager  -  Application 
Development  to  work  in 
Houston,  Texas.  Must  have 
Bachelor's  in  Computer 
Engineering  or  Computer 
Science  plus  5  yrs.  Exp. 
In  job  offered  or  5  yrs.  of 
related  exp.  in  computer 
systems  management.  Fax 
resume  to  Anthony  Startz 
at  713-547-9502.  Put  Job 
Code  MMAD-01  on  resume. 


Senior  Consultant  (Addison, 
TX):  Dvlp  object-oriented  (OO) 
s/ware  systms,  apply  knowl 
to  dvlp  OO  artifacts  &  main¬ 
tainable/extensible  s/ware, 
support  project  delivery,  & 
teach  curriculums  in  basic 
lang  &  technology  use.  Req 
BA  or  equiv  in  Comp  Sci  or 
related  field  &  5yrs  exp  in 
similar  position.  Send  resume 
to  Job  Code  10002006,  Valtech 
Technologies  Inc.,  5080 
Spectrum  Dr,  Ste.  700  West, 
Addison,  TX  75001. 


Sr  Hardware  Engineer 

(Atlanta,  GA)  HW  design  & 
dvplmt  of  telecom  test  equip 
incl  board  &  FPGA  levels. 
FPGA  design  in  schematic  & 
VHDL,  hands-on  board  debug 
&  testing.  Req:  BS  in  Electrical 
Engineering  w/  5  yrs  exp  in  job 
offered  or  as  a  Firmware  Engr. 
Exp  must  incl  3  yrs  in  Xilinx 
FPGA  design  in  VHDL  & 
schematic.  Send  resume:  HR, 
Sunrise  Telecom  Broadband, 
3250D  Peachtree  Corners  Cir, 
Norcross  GA  30092  (No  Phone 
Calls)  EOE.  Job  Code:  BE- 
SHE-PR. 


Software  Engg.  w/MS  dgr.  or  eqvl 
&  lyr.  exp,  or  B/S  &  5yrs.,  to  wk  in 
conj.  w/hardware  &  sftwre.  Analysts 
w/BS  or  equivl.  &  18  mos.  exp. 
Wk.  w/web,  client  svr.,  appl,  and/or 
system.  Use  min  of  6  of  the  foil:. Net 
/C#,  Asp. Net,  Frmwk,  MS/SQL, 
PL/SQL,  Oracle,  VB  &  Java  Script, 
J2EE,  JDBC,  Rpts,  Win  &  Loadrunner, 
QTP,  Oracle  Apps/SAP,  ERP,  Fin 
Mod's,  Tech/Func,  Forms,  Cube, 
ABAP,  BIW,  Buss.  Analysis,  Sys. 
Study,  ETL,  Informatica,  Cognos, 
Win,  Unix,  etc  for  SDLC  Resume: 
Hr.  Dept.,  Core  Providers,  4851  Keller 
Springs  Rd  #210  Addison,  TX  75001 


Computer  Professional  NY  based 
IT  firm.Jr  Lvl  positions  Programmer 
Analysts,  S/w  Engineers,  Systems 
Analysts,  Database  Administrators 
to  develop,  create,  and  modify 
general  comp,  applications  s/ware  or 
specialized  utility  programs.  Analyze 
user  needs  and  develop  software 
solutions  Sr.  Lvl  position,  IT 
Manager,  MIS  Manager,  ITS 
Director  to  plan,  direct,  or  coordinate 
activities  in  such  fields  as  electronic 
data  processing,  information  systems, 
systems  analysis,  and  computer 
programming.  Apply  w/2  copies  of 
resume  to  H.R.D,  Derex  Technologies, 
Inc  111-115  South  Frank  E.  Rodgers 
Blvd,  Suite#  306,  Harrison, NJ, 07029 


Database  Administrator  - 

to  maintain  and  develop 
company's  web  presence 
and  oversee  staff  involved 
in  database  operations. 
Maintain  test  and  develop 
internal  software  systems, 
databases  and  networks. 
Refer  to  job  #TSM-1  and 
reply  to:  rick@headsets.com, 
or  mail:  Headsets.com,  One 
Daniel  Burnham  Ct.,  SF,  CA 
94109. 


eTest  IT,  Inc.  in  Buffalo 
Grove,  IL  seeks  IT  Quality 
Assurance  Sr.  Project 
Manager.  M.S.,  2  yrs  exp 
in  job  or  as  Performance 
Test  Engineer  &  exp  w / 
LoadRunner,  TestDirector, 
QuicktestPro,  SiteScope 
&  Hiperformix  req'd.  Send 
res:  skreynin@etestit.com. 


SYS/DB  Admin  w /  MS  in 
Comp  Sci  or  related  field 
&  min  2  yrs  exp  wanted  by 
DeSilva  &  Phillips,  NYC. 
Duties  incl:  install/maintain 
MS  SQL  Server;  system 
backup/restore;  Win/AD 
support;  SW  &  HW  deployment 
&  integration;  estab/enforce 
enterprise  security  poli¬ 
cies  /procedures.  Fax  to 
212-686-2172. 


Sales  Manager, 

e-ieaming  Services  Oversees 
division  selling  IT  e-learning 
services  to  European  business 
clients.  Must  have  at  least 
2  years  experience  in  job 
offered.  Send  resume  to: 
CBT  Direct,  LLC,  25400  US 
19  N,  Suite  285,  Clearwater, 
FL  33763,  Attn.  K.  Cardinaie. 


Sr.  E-Leaming  System  Application 
Administrator:  Shall  be  responsible 
for  supervising  design,  development 
and  implementation  of  various 
applications  for  the  school’s  I.T. 
system,  including,  but  not  limited 
to,  database,  web  presence,  e- 
leaming,  student/parent  access  to 
web  and  network  system.  Shall 
use  SQL  Server,  Oracle,  ASP, 
ADO,  VB,  Com,  HTML,  IIS,  Java 
Script,  Mathematica  and  Web 
Mathematica.  Must  have  a  Masters 
(foreign  equiv.  acceptable)  in 
Computer  Science  with  3  yrs  of  I.T. 
exp.  2  yrs.  of  exp.  in  all  above 
skills.  Location:  Lawrenceville, 
NJ.  Send  resume.  Attn.  Timothy 
Cottrell,  CIO.  The  Lawrenceville 
School,  2500  Main  Street, 
Lawrenceville,  NJ  08648. 


Information  Technology/ 
Systems  Mgr,  Gainesville,  FL- 
Oversee  information  systems  & 
networks  linking  3  area  offices. 
MS  in  Elec.  Eng.  or  related  field 
or  BS  in  Elec.  Eng.  or  foreign 
equiv.  plus  5  years  progressively 
more  responsible  experience 
in  field.  40  hrs./wk,  8  AM  -  5  PM, 
M  -  F.  Salary  commensurate 
with  exp.  Resume  to:  Florida 
Property  Consultants  Group, 
2931  Kerry  Forest  Parkway, 
Suite  201 ,  Tallahassee,  FL  32309 


Software  Eng  wanted  by 
Tore  Financial,  LLC  -Phila 
PA,  w/MS  Comp  Sci  or 
related  field  &  min  2  yrs 
SW  devlpmt  exp.  Design 
SW  arch;  develop  front-end 
interface  &  back-end  server; 
enhance  system  security, 
performance  &  scalability. 
Send  resume  to  denise@ 
centurionsecurities.com 
or  fax  to  215-446-7045. 
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Cisco,  Avaya  Back  Standards 
On  Unified  Communications 

Network  rivals  expand  their  support 
for  SIP,  boosting  VoIP  interoperability 


BY  MATT  HAMBLEN 

T  THE  VoiceCon 
Spring  2006  con¬ 
ference  this  week, 
rivals  such  as  Cisco 
Systems  Inc.  and  Avaya  Inc. 
are  poised  to  announce  sup¬ 
port  for  each  other’s  IP  com¬ 
munications  technologies  un¬ 
der  the  banner  of  the  Session 
Initiation  Protocol  and  other 
open  standards. 

For  example,  Cisco  today 
will  announce  native  support 
for  SIP  as  part  of  its  new  Uni¬ 
fied  Communications  system. 
That  capability  will  enable 
newer  Cisco  IP  phones  to  work 
with  third-party  applications 
such  as  IBM’s  Lotus  Sametime 
and  Microsoft  Corp.’s  Live 
Communications  Server  2005. 

Separately,  Citrix  Systems 
Inc.  will  announce  plans  to 
use  SIP  to  integrate  its  net¬ 
work  and  application  access 
tools  with  Cisco’s  communica¬ 
tions  software. 

And  Avaya  will  introduce 
a  version  of  its  Converged 
Communications  Server  that 
supports  a  broader  range  of 
SIP  endpoints,  including  IP 
phones  from  Cisco.  Avaya 
also  plans  to  announce  that 
it’s  working  with  about  50 
companies,  including  Citrix, 
to  develop  communications 
applications  based  on  SIP  and 
other  standards. 

More  Cooperation 

After  years  of  selling  voice- 
over-IP  products  that  didn’t 
interoperate  with  one  another, 
vendors  are  starting  to  cooper¬ 
ate  more  closely  to  bring  voice, 
video  and  presence-awareness 
technologies  to  corporate 
desktops  and  handheld  de¬ 
vices,  analysts  said. 

“We’re  starting  to  hit  that 


wave  where  interoperability 
and  partnerships  will  define 
the  long-term  winners  and 
losers,”  said  Zeus  Kerravala, 
an  analyst  at  Yankee  Group 
Research  Inc.  in  Boston. 

Cisco’s  new  technology  in¬ 
tegrates  voice,  data  and  video 
in  one  system,  said  Barry 
O’Sullivan,  vice  president  and 
general  manager  of  the  com¬ 
pany’s  voice  technology  group. 

The  Unified  Communica- 


Continued  from  page  1 

Databases 

of  IBM’s  new  DB2  Express-C 
database.  They  are  managed 
by  a  load-balancing  applica¬ 
tion  from  Xkoto  Inc.,  which  is 
also  based  in  Toronto.  “DB2 
Express-C  just  feels  like  a 
much  more  profound  piece  of 
software,”  Green  said. 

Defections  such  as  Savvica’s 
are  heartening  to  IBM,  Micro¬ 
soft  Corp.  and  Oracle  Corp., 
which  in  the  past  six  months 
have  all  released  so-called  ex¬ 
press  databases  that  are  avail¬ 
able  to  users  free  of  charge.  In 
doing  so,  they  have  followed 
the  lead  of  Sybase  Inc.,  which 
released  an  express  version  of 
its  corporate  database  in  Sep¬ 
tember  2004. 

The  express  databases  are 
“significantly  challenging  the 
conventional  wisdom  about 
commercial  vs.  open-source 
databases,”  said  Peter  O’Kelly, 
an  analyst  at  Burton  Group  in 
Midvale,  Utah. 

The  commercial  vendors 
are  also  opening  a  second 
front  by  working  to  get  sup¬ 
port  for  their  databases  in 
application  frameworks  that 
are  popular  with  open-source 


tions  system  will  be  sold  under 
a  per-user  model,  or  its  vari¬ 
ous  components  can  be  pur¬ 
chased  separately,  O’Sullivan 
said.  New  components  include 
software  that  can  aggregate 
user  presence  information  on 
a  network  and  from  third-party 
devices,  and  an  application 
that  lets  end  users  place  voice 
and  video  calls  by  clicking  on 
system  icons  or  names  that  are 
contained  in  instant  messages. 

Randy  Cook,  director  of 
global  voice  networks  at 
Oracle  Corp.,  said  he  plans 
to  upgrade  major  portions  of 


users.  For  example,  Zend 
Technologies  Ltd.  last  week 
released  software  that  lets  de¬ 
velopers  use  the  PHP  scripting 
language  to  write  applications 
that  can  interact  with  any  of 
Oracle’s  flagship  lOg  databases. 

“IBM  and  Oracle  are  doing 
something  similar  to  what 
MySQL  has  done:  win  the 
hearts  and  minds  of  devel¬ 
opers  by  giving  them  easier 
access  to  technologies,”  said 
Mike  Pinette,  vice  president  of 
business  development  at  Cu¬ 
pertino,  Calif.-based  Zend. 

Oracle  said  hundreds  of 
thousands  of  developers  and 
students  have  downloaded  its 
Oracle  Database  lOg  Express 
Edition  since  the  software 
was  released  for  beta  testing 
in  October.  The  free  database, 
known  as  XE,  became  gener¬ 
ally  available  last  week. 

According  to  IBM,  DB2 
Express-C  was  downloaded 
about  50,000  times  in  the  first 
two  weeks  after  its  release  in 
late  January. 

In  contrast,  Version  5.0  of 
MySQL  has  been  downloaded 
more  than  6  million  times 
since  October,  said  Zack 
Urlocker,  vice  president  of 
marketing  at  MySQL  AB’s  U.S. 
offices  in  Cupertino.  “Sure,  the 


his  VoIP  network  in  the  next 
six  months  to  Cisco’s  Unified 
CallManager  5.0  release  and 
other  components  of  the  Uni¬ 
fied  Communications  offering. 

About  30,000  Oracle  work¬ 
ers  already  use  Cisco  IP 
phones,  and  Cook  said  the 
company  plans  to  expand 
the  VoIP  system  to  its  entire 
60,000-person  workforce  over 
the  next  18  months. 

Cook  said  he  looks  forward 
to  having  SIP  functionality 
throughout  the  network  and 
down  to  each  phone.  Cisco  is 
“moving  in  the  direction  we’ve 
asked  for  and  want,”  he  said. 

Telesphere  Ltd.,  a  provider 
of  IP  telephony  managed  ser¬ 
vices  in  Scottsdale,  Ariz.,  has 
been  using  Unified  Commu¬ 
nications  internally  for  the 


express  versions  are  free,  but 
they  come  with  very  signifi¬ 
cant  limitations,  especially  the 
lack  of  support,”  he  said.  “No 
enterprise  customer  will  go 
into  production  with  a  data¬ 
base  that  cannot  be  supported.” 

MySQL  user  Andy  Meadows 
said  he  hasn’t  been  tempted 
to  switch.  “Unless  it’s  a  large 
CRM  or  identity  management 
system,  I’ve  found  MySQL  to 
be  robust  and  scalable  enough,” 
said  Meadows,  president  of 
Live  Oak  Interactive,  a  Web 
development  and  hosting  firm 
in  Round  Rock,  Texas. 

On  the  other  hand,  Rajeev 
Kaula,  a  professor  in  Missouri 
State’s  information  systems 
school,  said  Oracle’s  XE  is 
easier  to  install  than  earlier 
“lite”  Oracle  databases  and  is 


past  four  months  and  began 
deploying  the  technology  to 
its  customers  last  month,  said 
CEO  Dave  Thomas.  The  SIP- 
based  presence  capabilities 
can  help  users  quickly  locate 
co-workers  in  other  offices 
worldwide,  Thomas  said. 

Although  Cisco  and  Avaya 
will  make  news  at  VoiceCon, 
which  starts  today  in  Orlando, 
analysts  said  that  Siemens  AG 
and  Nortel  Networks  Ltd.  have 
had  unified  communications 
strategies  for  a  while,  but  with 
some  capability  gaps. 

“The  really  unique  thing 
Cisco  has  done  is  to  create  a 
unified  communications  plat¬ 
form  that  it  can  deliver  on  its 
own,”  said  Brent  Kelly,  an  ana¬ 
lyst  at  Wainhouse  Research 
LLC  in  Duxbury,  Mass.  > 


helping  him  teach  students  to 
program  more  efficiently. 

“Students  who  honed  their 
skills  on  MySQL  and  PHP  tend 
to  treat  databases  only  as  a 
way  of  storing  tables,”  Kaula 
said.  Learning  on  Oracle  XE, 
“they  are  realizing  the  power 
of  transferring  the  business 
logic  to  the  database  itself.” 

Savvica’s  Green  said  he 
has  received  a  lot  of  inquiries 
from  IT  peers  who  previ¬ 
ously  weren’t  aware  that  they 
could  install  free  versions  of 
SQL  Server,  Oracle  or  DB2  as 
alternatives  to  open-source 
databases. 

“Frankly,  these  products 
are  better,”  Green  said.  “As 
more  people  hear  about  them, 

I  think  they  will  start  to  eat 
MySQL’s  lunch.”  > 
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FRANK  HAYES  ■  FRANKLY  SPEAKING 


Innovate  Big 


HERE’S  a  secret  of  successful  innovation:  Change  big,  not 
small.  No,  that  doesn’t  just  mean  you  should  think  big 
when  it  comes  to  innovations.  It  means  literally  that  you 
should  only  make  big  changes.  Leave  small  things  the 
same,  and  you’ll  be  better  off.  And  your  users  will  be 
much  better  off. 

Want  proof?  Just  take  a  careful  look  at  your  cell  phone.  Or  your  car’s 
dashboard.  Or  your  kitchen  sink. 

And  if  you’re  still  not  convinced,  ask  users  what  they  hate  most 
about  the  changes  that  IT  forces  down  their  throats. 


But  let’s  start  with  your  cell  phone.  Compared 
with  the  clunky  desk  telephone  you  probably 
remember  from  a  decade  or  two  ago,  it’s  tiny  and 
immensely  more  sophisticated  in  design.  Almost 
everything  is  different  from  that  old  clunker. 

Except  one  thing:  There  are  still  the  same  four 
rows  of  keys:  1 2  3, 4  5  6, 7  8  9,  *  0  #. 

The  keys  may  have  funny  shapes.  They  may  be 
virtual  keys  on  a  touch  screen.  But  it’s  the  same 
12  keys  in  the  same  setup. 

Why  not  three  rows  of  four,  or  two  rows  of  six, 
or  turned  upside  down  like  a  calculator  keypad? 
The  key  arrangement  would  be  the  smallest, 
cheapest  and  easiest  thing  to  change. 

But  that  would  break  users’  dialing  habits.  It 
would  slow  them  down.  Eventually,  they’d  trash 
that  oddball  cell  phone  for  one  that  isn’t  such  a 
pain  to  use  —  one  with  a  regular  set  of  keys. 

Your  car’s  speedometer  probably  has  an  indica¬ 
tor  that  moves  from  left  to  right  (or,  if  it’s  circular, 
moves  clockwise)  to  tell  you  you’re  speeding  up. 
That’s  the  way  it’s  been  for  decades,  though  near¬ 
ly  everything  else  in  the  instrument  panel  has 
changed.  Why  not  right  to  left  or  counterclock¬ 
wise?  Because  that  small  shift  would 
break  drivers’  critical  ability  to  read 
the  speedometer. 

Kitchen  sinks  in  the  U.S.  have  hot 
water  on  the  left  and  cold  on  the 
right.  That’s  true  whether  you  run 
water  by  twisting  faucet  handles, 
pulling  a  knob  or  moving  a  joystick¬ 
like  lever.  It  doesn’t  have  to  be.  But 
anyone  who’s  ever  been  scalded  by 
plumbing  set  up  the  opposite  way 
knows  why  left  hot/right  cold  is  a 
valuable  standard. 

Now  let’s  talk  about  users.  What 
drives  them  nuts  about  new  sys¬ 
tems?  Broken  habits.  Users  can  take 
major  process  changes  in  stride.  But 


keyboard  shortcuts  that  no  longer  work,  buttons 
that  no  longer  do  what  users  expect,  defaults  that 
have  changed  —  they  all  create  errors  when  us¬ 
ers  try  to  keep  working  the  same  old  way  on  new 
software  or  hardware.  And  if  the  systems  can’t 
be  adjusted  to  accommodate  users’  habits,  the 
habits  have  to  go. 

Users  hate  that.  And  they’re  right  to  hate 
it.  Broken  habits  aren’t  just  an  inconvenience. 
Habits  are  part  of  a  user’s  work  process.  And  a 
smoothly  running  process  means  productivity. 
Break  users’  habits,  and  you’ve  broken  the  proc¬ 
ess,  spiked  productivity  and  forced  users  to  de¬ 
velop  new  habits.  That  takes  weeks  at  best,  and 
months  if  the  old  habits  are  deeply  embedded. 

That’s  the  price  of  small-scale  innovation.  It’s  a 
price  that  can  be  measured  in  lower  productivity 
and  higher  training  and  support  costs,  user  dis¬ 
satisfaction  and  damage  to  IT’s  reputation. 

Look,  IT  people  like  little  innovations.  They’re 
easy  and  cheap  —  for  us.  But  for  users,  those 
small,  cosmetic  “improvements”  can  be  pure 
misery.  And  too  often  we  ignore  just  how  much 
they  really  cost. 

Is  there  a  benefit  to  your  innova¬ 
tion  so  big  that  it’s  worth  that  price? 
Then  go  for  it.  Never  underestimate 
how  disruptive  small  changes  can 
be,  but  never  let  that  prevent  chang¬ 
es  that  are  really  necessary. 

But  if  there’s  no  real  benefit  to 
a  small  change,  don’t  do  it.  In  fact, 
work  hard  to  keep  those  small-scale, 
user-level  details  the  same.  You’ll 
have  happier,  more  productive  users 
and  an  easier  time  supporting  them. 

So  innovate  big.  Aim  for  benefits 
that  will  cut  costs,  raise  productivity 
and  maybe  even  give  your  organiza¬ 
tion  a  real  competitive  advantage. 
And  leave  the  small  stuff  alone. » 


FRANK  HAYES,  Computer- 
world’s  senior  news  columnist, 
has  covered  IT  for  more  than 
20  years.  Contact  him  at  frank. 
hayes@computerworld.com. 


IDid  ItMyyyyy  Way 

A  user  calls  IT  and  asks  to  have  some  reports  re¬ 
printed.  “These  lists  are  printed  once  a  quarter  and 
consist  of  10,000  pages,  with  an  average  of  two 
pages  per  client,”  says  pilot  fish  who  fields  the  call 
and  orders  the  reprinting.  “The  lists  are  also  on  our 
intranet  as  PDF  files.  Two  days  later,  I  saw  that  user 
in  the  hall  pushing  a  cart  filled  with  paper.  Aren’t 
those  the  lists  I  got  for  you  two  days  ago?  I  asked. 
“Yes,”  he  responded,  “but  I  only  need  the  lists  of  a 
single  client.  I’m  bringing  these  to  the  shredder.” 


SHARK 

TANK* 


says  stunned 
fish.  “They  were 
running  two  of 
them  and  moth- 
bailed  the  other 
16,  never  to  be  used 
again.” 


Aha! 

Pilot  fish  can’t 
log  in  to  get 
his  e-mail  one 
morning,  and 
he  figures  he  needs 
his  password  reset, 
as  usual.  But  instead, 
the  help  desk  opens  a 
trouble  ticket  and  prom¬ 
ises  to  send  a  tech  out 
right  away.  “About  2:30 
p.m.  the  tech  shows 
up,”  grumbles  fish.  “He 
spends  half  an  hour 
checking  the  setup  and 
reinstalling  software. 

The  system  still  refuses 
to  authenticate.  Finally, 
he  calls  the  e-mail  guru. 

After  a  short  conversa¬ 
tion,  he  hangs  up,  turns 
to  me  and  says,  'Your 
server  has  been  down 
all  day.’  ” 

Completeness 

It’s  the  early  1990s,  and 
this  Cobol  developer 
pilot  fish  skips  lunches 
and  works  late  nights 
and  weekends  to  finish 
18  similar  reports  that 
one  department  says 
are  needed  urgently.  A 
few  weeks  later,  fish 
asks  a  user  how  the 
reports  are  performing. 

“The  user  told  me  they 
only  wanted  a  couple 
of  the  reports,  but 
they  had  asked  for  all 
18  because  they  were 
undecided  which  would 
be  the  most  useful,” 

OG0  LONG  FOR  SHARKY.  Send  me  your  true  tale  of 
IT  life  at  sharky@computerworld.com.  You’ll  snag 
a  snazzy  Shark  shirt  if  I  use  it.  And  check  out  Sharky’s  blog, 
browse  the  Sharkives  and  sign  up  for  Shark  Tank  home 
delivery  at  computerworld.com/sharky. 


Tradition 

Users  in  this  purchasing 
department  are  accus¬ 
tomed  to  pulling  data 
off  the  minicomputer, 
pasting  it  into  a  spread¬ 
sheet  and  then  using  a 
calculator  and  manually 
typing  in  the  result,  re¬ 
ports  a  pilot  fish  on  the 
scene.  “The  new  IT  di¬ 
rector  sees  them  going 
through  that  procedure 
and  shows  them  how 
to  let  the  spreadsheet 
do  the  calculating  for 
them.  Their  response? 
“Thank  you,  but  how  do 
you  know  the  totals  are 
correct?” 


Brevity 

Developer  pilot  fish 
and  his  cohorts  can’t 
figure  out  why  their 
new  manager  keeps 
visiting  their  cubes  and 
asking  for  information 
they’ve  already  sent 
him  by  e-mail.  “We 
finally  confronted  him 
to  find  out  why,”  says 
fish.  “What’s  the  deal? 
we  asked.  He  rather  de¬ 
fiantly  told  us  that  he  re¬ 
fuses  to  read  any  e-mail 
over  one  line  long.” 
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?nds  on  the  most  complete  and  secure,  application-aware  network 
'  AT&T  to  take  on  other  video  game  designers  from  coast  to  coast. 
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